diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index cc109e29b0..298d51302d 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -226,7 +226,7 @@ dependencies {
     implementation("androidx.work:work-rxjava2:$workVersion")
     implementation("androidx.swiperefreshlayout:swiperefreshlayout:1.2.0")
     implementation("com.google.android.flexbox:flexbox:3.0.0")
-    implementation("com.github.bitfireAT:dav4jvm:2.1.3") {
+    implementation("com.github.bitfireAT:dav4jvm:4.0.1") {
         exclude(group = "org.ogce", module = "xpp3") // Android comes with its own XmlPullParser
     }
     implementation("org.conscrypt:conscrypt-android:2.6.2")
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index c16749577a..62a7d86b80 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -328,7 +328,10 @@
             <trusting group="org.jetbrains.intellij.deps"/>
             <trusting group="org.jetbrains.kotlinx"/>
          </trusted-key>
-         <trusted-key id="8E3A02905A1AE67E7B0F9ACD3967D4EDA591B991" group="org.jetbrains.kotlinx" name="kotlinx-html-jvm" version="0.8.1"/>
+         <trusted-key id="8E3A02905A1AE67E7B0F9ACD3967D4EDA591B991">
+            <trusting group="io.ktor"/>
+            <trusting group="org.jetbrains.kotlinx" name="kotlinx-html-jvm" version="0.8.1"/>
+         </trusted-key>
          <trusted-key id="8F9A3C6D105B9F57844A721D79E193516BE7998F">
             <trusting group="org.dom4j" name="dom4j" version="2.1.4"/>
             <trusting group="org.dom4j" name="dom4j" version="2.2.0"/>
@@ -485,8 +488,8 @@
             <trusting group="org.codehaus.mojo"/>
          </trusted-key>
          <trusted-key id="F3184BCD55F4D016E30D4C9BF42E87F9665015C9" group="org.jsoup" name="jsoup" version="1.12.2"/>
-         <trusted-key id="F3FF33E96F18AA62DD580F9651FBF517CE6D6B80" group="gradle" name="gradle"/>
          <trusted-key id="F3BD845679DD6A30F3F50F91597852B0B140F0BC" group="com.caverock" name="androidsvg-aar" version="1.4"/>
+         <trusted-key id="F3FF33E96F18AA62DD580F9651FBF517CE6D6B80" group="gradle" name="gradle"/>
          <trusted-key id="F4DD59C90148BDC52BEB90A4530AA5F25C25011F" group="^org[.]apache($|([.].*))" regex="true"/>
          <trusted-key id="FA77DCFEF2EE6EB2DEBEDD2C012579464D01C06A" group="org.apache" name="apache"/>
          <trusted-key id="FA7929F83AD44C4590F6CC6815C71C0A4E0B8EDD" group="net.java.dev.jna"/>
@@ -19687,6 +19690,14 @@
             <sha256 value="977a16e0c70ee01139463fd4cbd9efd7d7a767c0c8b3e72941b69cbdd2f085d3" origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
+      <component group="com.github.bitfireAT" name="dav4jvm" version="4.0.1">
+         <artifact name="dav4jvm-4.0.1.jar">
+            <sha256 value="2eb911cf9b8bb4d99b63175746f64e58a476190d9260c23f4532d88afc066455" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+         <artifact name="dav4jvm-4.0.1.module">
+            <sha256 value="193f621daced909bc6818caa38300b771b52ff0512b28602f8fe42da178da586" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="com.github.blikoon" name="QRCodeScanner" version="0.1.2">
          <artifact name="QRCodeScanner-0.1.2.aar">
             <sha256 value="be2f333f2739761358f032ac86c0120deb2c93c92a8ac619cce912aef20e2b79" origin="Generated by Gradle" reason="Artifact is not signed"/>
@@ -22697,6 +22708,11 @@
             <sha256 value="58a3357303069a21930e7b9fe9b864de8bfb8bd4607433dbe48263459620cffc" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="com.google.guava" name="guava" version="33.6.0-jre">
+         <artifact name="guava-33.6.0-android.jar">
+            <sha256 value="9532ca9ba8aceb4cd2067171f981c799988b7f5844e3e274811a3bb757034bc4" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="com.google.guava" name="guava-parent" version="26.0-android">
          <artifact name="guava-parent-26.0-android.pom">
             <sha256 value="f8698ab46ca996ce889c1afc8ca4f25eb8ac6b034dc898d4583742360016cc04" origin="Generated by Gradle"/>