diff --git a/_servicedata b/_servicedata
index c50b19a..d5897bc 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/kanidm/kanidm.git</param>
-              <param name="changesrevision">c3dbf8331235e72d816853d053130ddf96809c01</param></service></servicedata>
\ No newline at end of file
+              <param name="changesrevision">a7fabdedefa1afec41221d73861bac35af9c0b6f</param></service></servicedata>
\ No newline at end of file
diff --git a/kanidm-1.4.4~git0.c3dbf83.tar.zst b/kanidm-1.4.4~git0.c3dbf83.tar.zst
deleted file mode 100644
index 89b55b9..0000000
--- a/kanidm-1.4.4~git0.c3dbf83.tar.zst
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d8ee1838d1c80b890877778e8b619eb19b7c270e3fefa2d158398b5eddf7b6f5
-size 6848773
diff --git a/kanidm-1.4.5~git0.a7fabde.tar.zst b/kanidm-1.4.5~git0.a7fabde.tar.zst
new file mode 100644
index 0000000..963b420
--- /dev/null
+++ b/kanidm-1.4.5~git0.a7fabde.tar.zst
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:073e89a14b896c634d46aadb00b0da4163bd9b7d4c13f055f5dd2878e37740fd
+size 6861536
diff --git a/kanidm.changes b/kanidm.changes
index 92d4562..538a834 100644
--- a/kanidm.changes
+++ b/kanidm.changes
@@ -1,3 +1,28 @@
+-------------------------------------------------------------------
+Sat Dec 21 07:57:16 UTC 2024 - william.brown@suse.com
+
+- Update to version 1.4.5~git0.a7fabde:
+  * Release 1.4.5
+  * nss/pam resolver should reauth faster (#3309)
+  * Further SCIM sync testing, minor fixes (#3305)
+  * Automatically trigger passkeys on login view (#3307)
+  * Re-add enrol another device flow
+  * Improved Cookie Removal
+  * Allow reseting account policy values to defaults (#3306)
+  * Incorrect member name in groups (#3302)
+  * SCIM Sync Missing Annotation (#3300)
+  * Ignore system users for UPG synthesiseation (#3297)
+  * Limit OAuth2 resumption to session (#3296)
+  * Use specific errors for intent token revoked (#3291)
+  * Autocomplete password during reauth with TOTP (#3290)
+  * Add CORS headers to jwks and userinfo (#3283)
+
+-------------------------------------------------------------------
+Wed Dec 11 03:12:47 UTC 2024 - William Brown <william.brown@suse.com>
+
+- Require system-user-nobody to prevent install ordering issue with
+  invalid rpc/statd users
+
 -------------------------------------------------------------------
 Tue Dec 03 05:55:52 UTC 2024 - william.brown@suse.com
 
diff --git a/kanidm.spec b/kanidm.spec
index f0424b1..e8a6302 100644
--- a/kanidm.spec
+++ b/kanidm.spec
@@ -20,7 +20,7 @@
 %define configdir %{_sysconfdir}/kanidm
 
 Name:           kanidm
-Version:        1.4.4~git0.c3dbf83
+Version:        1.4.5~git0.a7fabde
 Release:        0
 Summary:        A identity management service and clients.
 License:        ( Apache-2.0 OR BSL-1.0 ) AND ( Apache-2.0 OR ISC OR MIT ) AND ( Apache-2.0 OR MIT ) AND ( Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT ) AND ( CC0-1.0 OR Apache-2.0 ) AND ( MIT OR Apache-2.0 OR Zlib ) AND ( Unlicense OR MIT ) AND ( Zlib OR Apache-2.0 OR MIT ) AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 AND ISC AND MIT AND MPL-2.0 AND MPL-2.0+
@@ -90,6 +90,9 @@ Requires:       tpm2-tss
 %else
 Requires:       system-user-tss
 Requires:       tpm2.0-tools
+# progress.o.o #170107 - prevent an error for installing system-user-nobody due to invalid /etc/passwd
+# configuration of the statd and rpc users.
+Requires:       system-user-nobody
 %endif
 
 %description unixd-clients
diff --git a/vendor.tar.zst b/vendor.tar.zst
index 5ea8fdb..5e4b80d 100644
--- a/vendor.tar.zst
+++ b/vendor.tar.zst
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:ab325cf1fcd1b2ce83b9b2cc7997ca384f985ea8be61eca283607f3547cde3fb
-size 68682221
+oid sha256:7d577decb3b20a1309b40e55d4a83cc0663301c927549e4a8d735f992d6bdb89
+size 68718947