diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties
index 4ef77db56a4..7f2fdbdc2f3 100644
--- a/gradle/wrapper/gradle-wrapper.properties
+++ b/gradle/wrapper/gradle-wrapper.properties
@@ -7,8 +7,8 @@ distributionPath=wrapper/dists
 # packaging tripping an Isolated Projects violation (':desktopApp' cannot access Project.layout
 # on ':'). The first shows only on a configuration-cache hit, and CI keeps no configuration
 # cache between runs, so check it locally by running the same build twice.
-distributionSha256Sum=dce76f55f8e251a3a1f130eb120f30b3d271de2b76c9b0729d316b5a1b6dc01f
-distributionUrl=https\://services.gradle.org/distributions/gradle-9.8.1-bin.zip
+distributionSha256Sum=21bd5da2de49b642904077f38c0efdc7778e92b3ed0889392dca61b97e389607
+distributionUrl=https\://services.gradle.org/distributions/gradle-9.8.2-bin.zip
 networkTimeout=30000
 retries=3
 retryBackOffMs=500
diff --git a/scripts/verify-flatpak/desktop-offline.yaml b/scripts/verify-flatpak/desktop-offline.yaml
index 6ef56f15cce..c34058e99f4 100644
--- a/scripts/verify-flatpak/desktop-offline.yaml
+++ b/scripts/verify-flatpak/desktop-offline.yaml
@@ -101,7 +101,7 @@ modules:
         # flavor); distributionSha256Sum verifies this file. Renovate bumps the version here
         # alongside wrapper bumps (custom manager in renovate.json) but the sha256 must be
         # copied from distributionSha256Sum by hand; CI fails fast on any mismatch.
-        url: https://services.gradle.org/distributions/gradle-9.8.1-bin.zip
+        url: https://services.gradle.org/distributions/gradle-9.8.2-bin.zip
         sha256: dce76f55f8e251a3a1f130eb120f30b3d271de2b76c9b0729d316b5a1b6dc01f
         dest: "gradle/wrapper"
         dest-filename: "gradle-bin.zip"