diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index 59a94e97e2c..97857f2b033 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -228,7 +228,7 @@ dependencies {
     implementation("androidx.work:work-rxjava2:$workVersion")
     implementation("androidx.swiperefreshlayout:swiperefreshlayout:1.2.0")
     implementation("com.google.android.flexbox:flexbox:3.0.0")
-    implementation("com.github.bitfireAT:dav4jvm:2.1.3") {
+    implementation("com.github.bitfireAT:dav4jvm:4.1.0") {
         exclude(group = "org.ogce", module = "xpp3") // Android comes with its own XmlPullParser
     }
     implementation("org.conscrypt:conscrypt-android:2.7.0")
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 7306698fde8..c748744eb09 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -356,7 +356,10 @@
             <trusting group="org.jetbrains.kotlinx"/>
          </trusted-key>
          <trusted-key id="8DF3B0AA23ED78BE5233F6C2DEA3D207428EF16D" group="com.linkedin.dexmaker"/>
-         <trusted-key id="8E3A02905A1AE67E7B0F9ACD3967D4EDA591B991" group="org.jetbrains.kotlinx" name="kotlinx-html-jvm" version="0.8.1"/>
+         <trusted-key id="8E3A02905A1AE67E7B0F9ACD3967D4EDA591B991">
+            <trusting group="io.ktor"/>
+            <trusting group="org.jetbrains.kotlinx" name="kotlinx-html-jvm" version="0.8.1"/>
+         </trusted-key>
          <trusted-key id="8F9A3C6D105B9F57844A721D79E193516BE7998F">
             <trusting group="org.dom4j" name="dom4j" version="2.1.4"/>
             <trusting group="org.dom4j" name="dom4j" version="2.2.0"/>
@@ -19686,6 +19689,14 @@
             <sha256 value="977a16e0c70ee01139463fd4cbd9efd7d7a767c0c8b3e72941b69cbdd2f085d3" origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
+      <component group="com.github.bitfireAT" name="dav4jvm" version="4.1.0">
+         <artifact name="dav4jvm-4.1.0.jar">
+            <sha256 value="35fd0d49956322144a8ceb5199379e3d2836467a130ecabcbfafd4f80882120d" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+         <artifact name="dav4jvm-4.1.0.module">
+            <sha256 value="7f28a31ff5b6bd1f33f9b837876577df8270e696b884c9629232364039236c57" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="com.github.blikoon" name="QRCodeScanner" version="0.1.2">
          <artifact name="QRCodeScanner-0.1.2.aar">
             <sha256 value="be2f333f2739761358f032ac86c0120deb2c93c92a8ac619cce912aef20e2b79" origin="Generated by Gradle" reason="Artifact is not signed"/>
@@ -22725,6 +22736,11 @@
             <sha256 value="9532ca9ba8aceb4cd2067171f981c799988b7f5844e3e274811a3bb757034bc4" origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
+      <component group="com.google.guava" name="guava" version="33.7.1-jre">
+         <artifact name="guava-33.7.1-android.jar">
+            <sha256 value="603942ca694ea40060a0a54dd620c05668c904736bb4e16c80760e77e69c107d" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="com.google.guava" name="guava-parent" version="26.0-android">
          <artifact name="guava-parent-26.0-android.pom">
             <sha256 value="f8698ab46ca996ce889c1afc8ca4f25eb8ac6b034dc898d4583742360016cc04" origin="Generated by Gradle"/>