diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index c37e4c8118..8a5bd423bc 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -226,7 +226,7 @@ dependencies {
     implementation("androidx.work:work-rxjava2:$workVersion")
     implementation("androidx.swiperefreshlayout:swiperefreshlayout:1.2.0")
     implementation("com.google.android.flexbox:flexbox:3.0.0")
-    implementation("com.github.bitfireAT:dav4jvm:2.1.3") {
+    implementation("com.github.bitfireAT:dav4jvm:4.1.0") {
         exclude(group = "org.ogce", module = "xpp3") // Android comes with its own XmlPullParser
     }
     implementation("org.conscrypt:conscrypt-android:2.7.0")
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 4b7cd06cb4..86859fc058 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -200,7 +200,10 @@
             <trusting group="com.mebigfatguy.fb-contrib" name="fb-contrib" version="7.7.3"/>
             <trusting group="com.mebigfatguy.fb-contrib" name="fb-contrib" version="7.7.4"/>
          </trusted-key>
-         <trusted-key id="41CD49B4EF5876F9E9F691DABAC30622339994C4" group="org.jspecify" name="jspecify" version="1.0.0"/>
+         <trusted-key id="41CD49B4EF5876F9E9F691DABAC30622339994C4">
+            <trusting group="org.jspecify" name="jspecify" version="1.0.0"/>
+            <trusting group="org.jspecify" name="jspecify" version="1.0.1"/>
+         </trusted-key>
          <trusted-key id="44FBDBBC1A00FE414F1C1873586654072EAD6677" group="org.sonatype.oss" name="oss-parent" version="9"/>
          <trusted-key id="474DA67C32063DCA7FFE9CB5760F395DC40D55A7" group="io.noties.markwon"/>
          <trusted-key id="47504B76CF89C15C0512D9AFE16AB52D79FD224F">
@@ -337,7 +340,10 @@
             <trusting group="org.jetbrains.intellij.deps"/>
             <trusting group="org.jetbrains.kotlinx"/>
          </trusted-key>
-         <trusted-key id="8E3A02905A1AE67E7B0F9ACD3967D4EDA591B991" group="org.jetbrains.kotlinx" name="kotlinx-html-jvm" version="0.8.1"/>
+         <trusted-key id="8E3A02905A1AE67E7B0F9ACD3967D4EDA591B991">
+            <trusting group="io.ktor"/>
+            <trusting group="org.jetbrains.kotlinx" name="kotlinx-html-jvm" version="0.8.1"/>
+         </trusted-key>
          <trusted-key id="8F9A3C6D105B9F57844A721D79E193516BE7998F">
             <trusting group="org.dom4j" name="dom4j" version="2.1.4"/>
             <trusting group="org.dom4j" name="dom4j" version="2.2.0"/>
@@ -19696,6 +19702,14 @@
             <sha256 value="977a16e0c70ee01139463fd4cbd9efd7d7a767c0c8b3e72941b69cbdd2f085d3" origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
+      <component group="com.github.bitfireAT" name="dav4jvm" version="4.1.0">
+         <artifact name="dav4jvm-4.1.0.jar">
+            <sha256 value="35fd0d49956322144a8ceb5199379e3d2836467a130ecabcbfafd4f80882120d" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+         <artifact name="dav4jvm-4.1.0.module">
+            <sha256 value="7f28a31ff5b6bd1f33f9b837876577df8270e696b884c9629232364039236c57" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="com.github.blikoon" name="QRCodeScanner" version="0.1.2">
          <artifact name="QRCodeScanner-0.1.2.aar">
             <sha256 value="be2f333f2739761358f032ac86c0120deb2c93c92a8ac619cce912aef20e2b79" origin="Generated by Gradle" reason="Artifact is not signed"/>
@@ -22706,6 +22720,11 @@
             <sha256 value="58a3357303069a21930e7b9fe9b864de8bfb8bd4607433dbe48263459620cffc" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="com.google.guava" name="guava" version="33.7.1-jre">
+         <artifact name="guava-33.7.1-android.jar">
+            <sha256 value="603942ca694ea40060a0a54dd620c05668c904736bb4e16c80760e77e69c107d" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="com.google.guava" name="guava-parent" version="26.0-android">
          <artifact name="guava-parent-26.0-android.pom">
             <sha256 value="f8698ab46ca996ce889c1afc8ca4f25eb8ac6b034dc898d4583742360016cc04" origin="Generated by Gradle"/>