diff --git a/fake-gcs-server.changes b/fake-gcs-server.changes
index 39863af..88c7771 100644
--- a/fake-gcs-server.changes
+++ b/fake-gcs-server.changes
@@ -31,7 +31,7 @@ Tue Jan 28 22:48:18 UTC 2025 - Matej Cepl <mcepl@cepl.eu>
     - Support setting cache-control of object
     - add aliases to support specifying EventOptions
 - Update to v1.49.3
-    - Go 1.23 is out, adopt it
+    - Go 1.23 is out, adopt it (CVE-2023-45288, bsc#1236521)
 
 -------------------------------------------------------------------
 Thu Jul 18 14:27:33 UTC 2024 - Matej Cepl <mcepl@cepl.eu>
@@ -48,6 +48,7 @@ Thu Jul 18 14:27:33 UTC 2024 - Matej Cepl <mcepl@cepl.eu>
   - Don't omit versioning.enabled in bucket response
   - Additional ACL response attributes
   - Additional bucket response attributes
+  - Upgrade deps (CVE-2023-45288, bsc#1236521)
 - Update to v1.48.0:
   - Fix brittle test
   - Fill the errors attribute for HTTP errors
diff --git a/fake-gcs-server.spec b/fake-gcs-server.spec
index 7a12426..b179bb1 100644
--- a/fake-gcs-server.spec
+++ b/fake-gcs-server.spec
@@ -29,10 +29,11 @@ URL:            https://github.com/fsouza/fake-gcs-server
 Source0:        https://github.com/fsouza/%{name}/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
 Source1:        vendor.tar.xz
 BuildRequires:  fdupes
+BuildRequires:  go >= 1.23.0
 BuildRequires:  golang-packaging
 BuildRequires:  xz
-# %%{go_nostrip}
-# %%{go_provides}
+%{go_nostrip}
+%{go_provides}
 
 %description
 fake-gcs-server provides an emulator for Google Cloud Storage API. It can be used as a library in Go projects and/or as a standalone binary/Docker image.
diff --git a/vendor.tar.xz b/vendor.tar.xz
index 9263763..77759c9 100644
--- a/vendor.tar.xz
+++ b/vendor.tar.xz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:7401bf90a697f7836169eb5a7c6520c355d46125119a980ca1d8736c23be089e
-size 3881396
+oid sha256:8504fb34cdaaddfa598e4a5700c4db83006ac35ca5431eb099f25f0c79284598
+size 3883388