diff --git a/app/build.gradle b/app/build.gradle
index c8567341f..ad9be826a 100644
--- a/app/build.gradle
+++ b/app/build.gradle
@@ -114,7 +114,7 @@ dependencies {
         exclude group: 'commons-logging', module: 'commons-logging'
     }
 
-    implementation("com.github.nextcloud:android-library:2.21.1") {
+    implementation("com.github.nextcloud:android-library:2.22.0") {
         exclude group: 'org.ogce', module: 'xpp3'
     }
 
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 93b05c40c..82dedd444 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -69,7 +69,10 @@
          <trusted-key id="19BEAB2D799C020F17C69126B16698A4ADF4D638" group="org.checkerframework" name="checker-qual"/>
          <trusted-key id="1A55F091AD28C07F831FA44D7905DE25C78AD456" group="com.google.protobuf"/>
          <trusted-key id="1D0A8B5E77C678A7C724445ABF984B4145EA13F7" group="com.squareup" name="javapoet" version="1.13.0"/>
-         <trusted-key id="1D217F8475EEE9F19AB8DD6B793FD5751A0F0780" group="com.squareup.retrofit2" name="retrofit" version="3.0.0"/>
+         <trusted-key id="1D217F8475EEE9F19AB8DD6B793FD5751A0F0780">
+            <trusting group="com.squareup.retrofit2" name="retrofit" version="3.0.0"/>
+            <trusting group="^com[.]squareup($|([.].*))" regex="true"/>
+         </trusted-key>
          <trusted-key id="1D9AA7F9E1E2824728B8CD1794B291AEF984A085" group="io.reactivex.rxjava2"/>
          <trusted-key id="24D04176586361FDA94EE0315F7786DF73E61F56">
             <trusting group="com.google.devtools.ksp" name="symbol-processing-api" version="1.9.0-1.0.13"/>
@@ -195,6 +198,7 @@
             <trusting group="androidx.lifecycle"/>
             <trusting group="androidx.profileinstaller" name="profileinstaller" version="1.4.0"/>
             <trusting group="androidx.recyclerview"/>
+            <trusting group="androidx.startup" name="startup-runtime" version="1.2.0"/>
             <trusting group="androidx.test"/>
             <trusting group="androidx.test.espresso" name="espresso-idling-resource" version="3.6.1"/>
             <trusting group="androidx.transition" name="transition" version="1.5.0"/>
@@ -10779,6 +10783,14 @@
             <sha256 value="a622c6208653730551e52d70467ee19fa3e61164cc7b358d68584febcd4f6a30" origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
+      <component group="com.github.nextcloud" name="android-library" version="2.22.0">
+         <artifact name="android-library-2.22.0.aar">
+            <sha256 value="22c05e04d2b2667c39da419b2d3d07e7832babd4b2e235aa5d4394a4fecf92ee" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+         <artifact name="android-library-2.22.0.module">
+            <sha256 value="6dbf57bc89a9537e4ae525ebd7b6b82771c0305b2a2fed834485c1123a89e631" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="com.github.nextcloud" name="android-library" version="ffc47c75fabbcbcdcd32b30e9836fde58d5c59d5">
          <artifact name="android-library-ffc47c75fabbcbcdcd32b30e9836fde58d5c59d5.aar">
             <sha256 value="97068670e06306878153d4ea2aa8a2e00252f023deb18123b64f2f5e5920458e" origin="Generated by Gradle" reason="Artifact is not signed"/>