diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 8d1658db6..2b66ec5ee 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -24,4 +24,5 @@ updates:
       - "dependabot"
       - "dependencies"
       - "github-actions"
+      - "skip-changelog"
 version: 2
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1c3a1aeeb..48b973685 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 - Bumps `org.hamcrest:hamcrest` from 2.2 to 3.0
 - Bumps `com.github.jk1.dependency-license-report` from 2.8 to 2.9
 - Bumps `org.apache.httpcomponents.client5:httpclient5` from 5.4 to 5.4.1
+- Bumps `org.apache.httpcomponents.core5:httpcore5` from 5.3 to 5.3.1
 
 This section is for maintaining a changelog for all breaking changes for the client that cannot be released in the 2.x line. All other non-breaking changes should be added to [Unreleased 2.x] section.
 
diff --git a/java-client/build.gradle.kts b/java-client/build.gradle.kts
index 44165ebf6..180bcbc1e 100644
--- a/java-client/build.gradle.kts
+++ b/java-client/build.gradle.kts
@@ -189,7 +189,7 @@ dependencies {
     api("org.apache.httpcomponents.client5:httpclient5:5.4.1") {
       exclude(group = "org.apache.httpcomponents.core5")
     }
-    api("org.apache.httpcomponents.core5:httpcore5:5.3")
+    api("org.apache.httpcomponents.core5:httpcore5:5.3.1")
     api("org.apache.httpcomponents.core5:httpcore5-h2:5.3.1")
 
     // Apache 2.0