diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -40,23 +40,23 @@ jobs:
     - name: Set up NuGet
       uses: nuget/setup-nuget@v2.0.1
 
-    - name: Set up Python 3.14.3
+    - name: Set up Python 3.14.4
       run: |
-        nuget install python -Version 3.14.3 -x -o .
+        nuget install python -Version 3.14.4 -x -o .
         $py = Get-Item python\tools
         Write-Host "Adding $py to PATH"
         "$py" | Out-File $env:GITHUB_PATH -Encoding UTF8 -Append
       working-directory: ${{ runner.temp }}
 
-    - name: Check Python version is 3.14.3
+    - name: Check Python version is 3.14.4
       run: >
         python -c "import sys;
         print(sys.version);
         print(sys.executable);
-        sys.exit(0 if sys.version_info[:5] == (3, 14, 3, 'final', 0) else 1)"
+        sys.exit(0 if sys.version_info[:5] == (3, 14, 4, 'final', 0) else 1)"
 
     - name: Install build dependencies
-      run: python -m pip install "pymsbuild>=1.2.0b1"
+      run: python -m pip install "pymsbuild==1.2.2"
 
     - name: 'Install test runner'
       run: python -m pip install pytest pytest-cov

diff --git a/_msbuild.py b/_msbuild.py
@@ -58,6 +58,9 @@ class ResourceFile(CSourceFile):
     VersionInfo(FileDescription="Native helper functions for PyManager"),
     PyFile('__init__.py'),
     CPP_SETTINGS,
+    ItemDefinition("Link",
+        AdditionalDependencies=Prepend("wintrust.lib;"),
+    ),
     IncludeFile('*.h'),
     CSourceFile('*.cpp'),
     CFunction('coinitialize'),
@@ -89,6 +92,7 @@ class ResourceFile(CSourceFile):
     CFunction('read_alias_package'),
     CFunction('broadcast_settings_change'),
     CFunction('get_processor_architecture'),
+    CFunction('verify_trust'),
     source='src/_native',
     RootNamespace='_native',
 )

diff --git a/_msbuild_test.py b/_msbuild_test.py
@@ -23,6 +23,9 @@
             PreprocessorDefinitions=Prepend("ERROR_LOCATIONS=1;BITS_INJECT_ERROR=1;"),
             LanguageStandard="stdcpp20",
         ),
+        ItemDefinition("Link",
+            AdditionalDependencies=Prepend("wintrust.lib;"),
+        ),
         IncludeFile('*.h'),
         CSourceFile('*.cpp'),
         CFunction('coinitialize'),
@@ -55,6 +58,7 @@
         CFunction('read_alias_package'),
         CFunction('broadcast_settings_change'),
         CFunction('get_processor_architecture'),
+        CFunction('verify_trust'),
         source='src/_native',
     ),
     DllPackage('_shellext_test',