diff --git a/build.gradle b/build.gradle
index 7f94c35eb..ddc8486b8 100644
--- a/build.gradle
+++ b/build.gradle
@@ -42,4 +42,14 @@ allprojects {
         google()
         mavenCentral()
     }
+
+    // Patch transitive netty-codec-http to clear Snyk. Pulled in by AGP's
+    // test tooling (grpc-netty); not included in the published AAR.
+    configurations.configureEach {
+        resolutionStrategy.eachDependency { details ->
+            if (details.requested.group == 'io.netty' && details.requested.name == 'netty-codec-http') {
+                details.useVersion '4.1.137.Final'
+            }
+        }
+    }
 }