diff --git a/qca/.SRCINFO b/qca/.SRCINFO
new file mode 100644
index 0000000000..21928f7633
--- /dev/null
+++ b/qca/.SRCINFO
@@ -0,0 +1,49 @@
+pkgbase = qca
+	pkgdesc = Qt Cryptographic Architecture
+	pkgver = 2.3.9
+	pkgrel = 2
+	url = https://userbase.kde.org/QCA
+	arch = x86_64
+	license = LGPL-2.1-or-later
+	makedepends = botan
+	makedepends = cmake
+	makedepends = doxygen
+	makedepends = libgcrypt
+	makedepends = libsasl
+	makedepends = openssl
+	makedepends = pkcs11-helper
+	makedepends = qt5-base
+	makedepends = qt6-base
+	makedepends = qt6-5compat
+	depends = ca-certificates
+	depends = gcc-libs
+	depends = glibc
+	depends = nss
+	optdepends = botan: botan plugin
+	optdepends = libgcrypt: gcrypt plugin
+	optdepends = libsasl: SASL plugin
+	optdepends = openssl: SSL plugin
+	optdepends = pkcs11-helper: PKCS-11 plugin
+	source = https://download.kde.org/stable/qca/2.3.9/qca-2.3.9.tar.xz
+	source = https://download.kde.org/stable/qca/2.3.9/qca-2.3.9.tar.xz.sig
+	validpgpkeys = CB9387521E1EE0127DA804843FDBB55084CC5D84
+	sha256sums = c555d5298cdd7b6bafe2b1f96106f30cfa543a23d459d50c8a91eac33c476e4e
+	sha256sums = SKIP
+
+pkgname = qca-qt5
+	depends = ca-certificates
+	depends = gcc-libs
+	depends = glibc
+	depends = nss
+	depends = qt5-base
+	provides = qca
+	conflicts = qca
+	replaces = qca
+
+pkgname = qca-qt6
+	depends = ca-certificates
+	depends = gcc-libs
+	depends = glibc
+	depends = nss
+	depends = qt6-5compat
+	depends = qt6-base
diff --git a/qca/.nvchecker.toml b/qca/.nvchecker.toml
new file mode 100644
index 0000000000..6fae1b3292
--- /dev/null
+++ b/qca/.nvchecker.toml
@@ -0,0 +1,6 @@
+[qca]
+source = 'gitlab'
+gitlab = 'libraries/qca'
+host = 'invent.kde.org'
+use_max_tag = true
+prefix = 'v'
diff --git a/qca/PKGBUILD b/qca/PKGBUILD
index 1c6166d4f3..2fb350ea0e 100644
--- a/qca/PKGBUILD
+++ b/qca/PKGBUILD
@@ -6,8 +6,8 @@
 pkgbase=qca
 pkgname=(qca-qt5
          qca-qt6)
-pkgver=2.3.8
-pkgrel=3
+pkgver=2.3.9
+pkgrel=2
 pkgdesc='Qt Cryptographic Architecture'
 arch=(x86_64 powerpc64le powerpc64 powerpc riscv64)
 url='https://userbase.kde.org/QCA'
@@ -32,7 +32,7 @@ makedepends=(botan
              qt6-base
              qt6-5compat)
 source=(https://download.kde.org/stable/$pkgbase/$pkgver/$pkgbase-$pkgver.tar.xz{,.sig})
-sha256sums=('48759ca86a0202461d908ba66134380cc3bb7d20fed3c031b9fc0289796a8264'
+sha256sums=('c555d5298cdd7b6bafe2b1f96106f30cfa543a23d459d50c8a91eac33c476e4e'
             'SKIP')
 validpgpkeys=(CB9387521E1EE0127DA804843FDBB55084CC5D84) # Harald Sitter <sitter@kde.org>