diff --git a/graphql-java-20.0.tar.gz b/graphql-java-20.0.tar.gz
deleted file mode 100644
index 34bbeac..0000000
--- a/graphql-java-20.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:7c02304b1cbbba74ee737d65b6ecdd01394c69ec40db81dff7cec1701ca42f47
-size 2070742
diff --git a/graphql-java-20.0.pom b/graphql-java-20.2.pom
similarity index 98%
rename from graphql-java-20.0.pom
rename to graphql-java-20.2.pom
index 1bc95e3..0bc8935 100644
--- a/graphql-java-20.0.pom
+++ b/graphql-java-20.2.pom
@@ -3,7 +3,7 @@
   <modelVersion>4.0.0</modelVersion>
   <groupId>com.graphql-java</groupId>
   <artifactId>graphql-java</artifactId>
-  <version>20.0</version>
+  <version>20.2</version>
   <dependencies>
     <dependency>
       <groupId>com.graphql-java</groupId>
diff --git a/graphql-java-20.2.tar.gz b/graphql-java-20.2.tar.gz
new file mode 100644
index 0000000..1ec242b
--- /dev/null
+++ b/graphql-java-20.2.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ae7eae6b5fc87a77f18f48c0b78231d202dd78ace79278c7d9d6bbec282822b9
+size 2083643
diff --git a/graphql-java.changes b/graphql-java.changes
index 60c9d54..3a7bf52 100644
--- a/graphql-java.changes
+++ b/graphql-java.changes
@@ -1,3 +1,93 @@
+-------------------------------------------------------------------
+Sun Apr  9 22:17:48 UTC 2023 - Anton Shvetz <shvetz.anton@gmail.com>
+
+- Update to v20.2
+  * This is a security bugfix release containing #3148, which adds
+    a limit to the number of characters used in an operation. There
+    are no breaking changes in this release.
+  * What's Changed
+    + Diffing fixes 2 by @gnawf in #3146
+    + Fix argument added to new type by @gnawf in #3150
+    + Show test failures in builds by @bbakerman in #3151
+    + Fix applied argument deleted on field by @gnawf in #3154
+    + Have a limit on how many characters are presented to the
+      Parser by @bbakerman in #3148
+- Update to v20.1
+  * This is a feature and bugfix release. There are no breaking
+    changes in this release. This release continues to use Java 8.
+    This release includes a security fix #3112 which adds a limit
+    to the depth of grammar rules, to prevent stack overflow.
+  * Highlights
+    + #3095 improves resiliency to class loader problems with
+      LambdaMetafactory.
+    + #3049 adds an extensions builder and merger.
+  * Release policy
+    + We have formalised our release schedule to give the community
+      a better idea of when to expect releases, what will be
+      contained within them, and when important fixes will be
+      backported. See the full details at
+      https://www.graphql-java.com/blog/release-policy
+  * What's Changed
+    + docs: update badges for v20 release by @setchy in #3047
+    + Update FieldValidationInstrumentation.java by @kfwerf in
+      #3066
+    + Update vulnerability reporting instructions by @dondonz in
+      #3070
+    + Fix extend schema directives ANTLR rule by @dondonz in #3071
+    + Allow users to disable MultiSourceReader trackData through
+      ParserOptions by @AntaresS in #3062
+    + Add missing getter and fix name consistency by @gnawf in
+      #3073
+    + use toolchain to specify the java version by @andimarek in
+      #3075
+    + Fix isNameChanged by @gnawf in #3076
+    + Update instrumentation example in documentation by @dondonz
+      in #3078
+    + Reuse ExecutionStrategyInstrumentationContext.NOOP in
+      DataLoaderDispatcherInstrumentation by @dfa1 in #3068
+    + Add missing this keyword for readability by @cookieMr in
+      #3067
+    + defaulting the deprecated methods in Coercing by @bbakerman
+      in #3063
+    + Add missing detail by @gnawf in #3079
+    + Updating the JavaDoc http links by @bbakerman in #3083
+    + An Extensions Builder by @bbakerman in #3049
+    + Use ImmutableList.builderWithExpectedSize in
+      ImmutableKit.mapAndDropNulls too by @dfa1 in #3081
+    + Resolve TypeReferences in schema applied directives by
+      @kaqqao in #3054
+    + Remove sun.misc.* from MANIFEST.MF by @dondonz in #3091
+    + Replace javax nullable annotations with JetBrains equivalent
+      by @dondonz in #3093
+    + Ensured that the MANIFEST.MF files is the first entry in the
+      JAR File by @schaefa in #3097
+    + Fix type change and directive deletion problems in schema
+      diffing by @gnawf in #3102
+    + Handle enum value rename by @gnawf in #3103
+    + Bugfix: do not use default operation name types if not
+      included in schema definition block by @dondonz in #3088
+    + Adding ExtensionsBuilder in the graphql context by default by
+      @bbakerman in #3085
+    + Meta Lambda failures - make the code more resilient to class
+      loader challenges by @bbakerman in #3095
+    + Gracefully returning null in cases of UnresolvedTypeException
+      by @ahmadizm in #3122
+    + Add dependabot configuration by @yeikel in #3115
+    + Bump org.jetbrains:annotations from 23.0.0 to 24.0.1 by
+      @dependabot in #3125
+    + Remove unused dependencies by @dondonz in #3132
+    + Bump actions/checkout from 1 to 3 by @dependabot in #3126
+    + Bump google-github-actions/auth from 0.4.0 to 1.0.0 by
+      @dependabot in #3129
+    + Bump org.codehaus.groovy:groovy from 3.0.9 to 3.0.16 by
+      @dependabot in #3131
+    + Add manual stop on schema diffing algorithm by @gnawf in
+      #3119
+    + Preventing stack overflow exceptions via limiting the depth
+      of the parser rules by @bbakerman in #3112
+    + UniqueObjectFieldName validation rule (#1806) by @ashatch in
+      #3094
+
 -------------------------------------------------------------------
 Fri Jan 27 01:07:14 UTC 2023 - Anton Shvetz <shvetz.anton@gmail.com>
 
diff --git a/graphql-java.spec b/graphql-java.spec
index 4fb1eac..7b04664 100644
--- a/graphql-java.spec
+++ b/graphql-java.spec
@@ -17,7 +17,7 @@
 
 
 Name:           graphql-java
-Version:        20.0
+Version:        20.2
 Release:        0
 Summary:        GraphQL Java implementation
 License:        MIT