diff --git a/_service b/_service
index 28bf2fd..f137766 100644
--- a/_service
+++ b/_service
@@ -3,7 +3,7 @@
     <param name="url">https://github.com/istio/istio</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">1.22.0</param>
+    <param name="revision">1.22.1</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">disable</param>
   </service>
@@ -16,6 +16,6 @@
     <param name="compression">gz</param>
   </service>
   <service name="go_modules" mode="manual">
-    <param name="archive">istio-1.22.0.obscpio</param>
+    <param name="archive">istio-1.22.1.obscpio</param>
   </service>
 </services>
diff --git a/istio-1.22.0.obscpio b/istio-1.22.0.obscpio
deleted file mode 100644
index c1f3394..0000000
--- a/istio-1.22.0.obscpio
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:9d1ae564c79a4130a8461d14dcae0406b460898f8ca023a922d5defb94f23878
-size 34081293
diff --git a/istio-1.22.1.obscpio b/istio-1.22.1.obscpio
new file mode 100644
index 0000000..9bd5b7b
--- /dev/null
+++ b/istio-1.22.1.obscpio
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:84a1792aeca8c50861cfb6a9ed2c7817888718e481add6103abb86942a67a4d7
+size 34210317
diff --git a/istio.obsinfo b/istio.obsinfo
index 0e9f62e..c954b46 100644
--- a/istio.obsinfo
+++ b/istio.obsinfo
@@ -1,4 +1,4 @@
 name: istio
-version: 1.22.0
-mtime: 1715396337
-commit: aaf597fbfae607adf4bb4e77538a7ea98995328a
+version: 1.22.1
+mtime: 1717274947
+commit: a1a76b8e75f810eb6c808b04531343ae2c7b8082
diff --git a/istioctl.changes b/istioctl.changes
index b76c9ae..c24a83d 100644
--- a/istioctl.changes
+++ b/istioctl.changes
@@ -1,3 +1,22 @@
+-------------------------------------------------------------------
+Wed Jun  5 05:53:19 UTC 2024 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
+
+- update to 1.22.1:
+  https://istio.io/latest/news/releases/1.22.x/announcing-1.22.1/
+  * Added a new, optional experimental admission policy that only
+    allows stable features/fields to be used in Istio APIs when
+    using a remote Istiod cluster. (Issue #173)
+  * Fixed adding of pod IPs to the host’s ipset to explicitly fail
+    instead of silently overwriting.
+  * Fixed an issue causing outboundstatname in MeshConfig to not be
+    honored for subset clusters.
+  * Fixed custom injection of the istio-proxy container not working
+    properly when SecurityContext.RunAs fields were set.
+  * Fixed returning 503 errors by auto-passthrough gateways created
+    after enabling mTLS.
+  * Fixed serviceRegistry orders influence the proxy labels, so we
+    put the Kubernetes registry in front. (Issue #50968) 
+
 -------------------------------------------------------------------
 Tue May 14 05:39:32 UTC 2024 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
 
diff --git a/istioctl.spec b/istioctl.spec
index 1cd34ce..1e6b5bc 100644
--- a/istioctl.spec
+++ b/istioctl.spec
@@ -19,7 +19,7 @@
 %define __arch_install_post export NO_BRP_STRIP_DEBUG=true
 
 Name:           istioctl
-Version:        1.22.0
+Version:        1.22.1
 Release:        0
 Summary:        CLI for the istio servic mesh in Kubernetes
 License:        Apache-2.0
diff --git a/vendor.tar.gz b/vendor.tar.gz
index 595f4e6..c6ff42f 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:863c649ac8f8b4857f5782fb9c25c50bb0054a2e63ffd7d20c19fde6d49ad10b
-size 21102534
+oid sha256:d64781de065da9e5c16a0afb4af0ab52c642383d7ca49178f0a40e278ebf2ad8
+size 21102627