diff --git a/spec/conformance/Gemfile b/spec/conformance/Gemfile
index ee6d9b8d..d07a2ef6 100644
--- a/spec/conformance/Gemfile
+++ b/spec/conformance/Gemfile
@@ -5,7 +5,7 @@ source "https://rubygems.org"
 ruby "~> 3.4.2"
 
 gem "byebug"
-gem "fido_metadata", github: 'bdewater/fido_metadata'
+gem "fido_metadata", "~> 0.5.0"
 gem "puma", "~> 6.6"
 gem "rack-contrib"
 gem "rackup", "~> 2.2"
diff --git a/spec/conformance/Gemfile.lock b/spec/conformance/Gemfile.lock
index 96348037..a71b4040 100644
--- a/spec/conformance/Gemfile.lock
+++ b/spec/conformance/Gemfile.lock
@@ -1,14 +1,7 @@
-GIT
-  remote: https://github.com/bdewater/fido_metadata.git
-  revision: fcc1fc1a92f9b0eda5900485d773336494b2c1c6
-  specs:
-    fido_metadata (0.3.0)
-      jwt (~> 2.0)
-
 PATH
   remote: ../..
   specs:
-    webauthn (3.4.0)
+    webauthn (3.4.1)
       android_key_attestation (~> 0.3.0)
       bindata (~> 2.4)
       cbor (~> 0.5.9)
@@ -21,38 +14,42 @@ GEM
   remote: https://rubygems.org/
   specs:
     android_key_attestation (0.3.0)
-    base64 (0.2.0)
-    bindata (2.5.0)
-    byebug (11.1.3)
-    cbor (0.5.9.8)
+    base64 (0.3.0)
+    bindata (2.5.1)
+    byebug (12.0.0)
+    cbor (0.5.10.1)
     cose (1.3.1)
       cbor (~> 0.5.9)
       openssl-signature_algorithm (~> 1.0)
-    jwt (2.2.1)
-    logger (1.6.6)
-    multi_json (1.14.1)
-    mustermann (3.0.3)
+    fido_metadata (0.5.0)
+      base64 (>= 0.1.0)
+      jwt (>= 2.0, < 4)
+    jwt (2.10.2)
+      base64
+    logger (1.7.0)
+    multi_json (1.17.0)
+    mustermann (3.0.4)
       ruby2_keywords (~> 0.0.1)
     nio4r (2.7.4)
     openssl (3.3.0)
     openssl-signature_algorithm (1.3.0)
       openssl (> 2.0)
-    puma (6.6.0)
+    puma (6.6.1)
       nio4r (~> 2.0)
-    rack (3.1.10)
+    rack (3.2.1)
     rack-contrib (2.5.0)
       rack (< 4)
     rack-protection (4.1.1)
       base64 (>= 0.1.0)
       logger (>= 1.6.0)
       rack (>= 3.0.0, < 4)
-    rack-session (2.1.0)
+    rack-session (2.1.1)
       base64 (>= 0.1.0)
       rack (>= 3.0.0)
     rackup (2.2.1)
       rack (>= 3)
-    ruby2_keywords (0.0.1)
-    rubyzip (2.0.0)
+    ruby2_keywords (0.0.5)
+    rubyzip (3.1.0)
     safety_net_attestation (0.4.0)
       jwt (~> 2.0)
     sinatra (4.1.1)
@@ -68,8 +65,8 @@ GEM
       rack-protection (= 4.1.1)
       sinatra (= 4.1.1)
       tilt (~> 2.0)
-    tilt (2.0.10)
-    tpm-key_attestation (0.14.0)
+    tilt (2.6.1)
+    tpm-key_attestation (0.14.1)
       bindata (~> 2.4)
       openssl (> 2.0)
       openssl-signature_algorithm (~> 1.0)
@@ -80,7 +77,7 @@ PLATFORMS
 
 DEPENDENCIES
   byebug
-  fido_metadata!
+  fido_metadata (~> 0.5.0)
   puma (~> 6.6)
   rack-contrib
   rackup (~> 2.2)