diff --git a/mojo-executor-parent-2.3.1.tar.gz b/mojo-executor-parent-2.3.1.tar.gz
deleted file mode 100644
index d7bbdac..0000000
--- a/mojo-executor-parent-2.3.1.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:f5556091119617dfe51d397efeea8d836a8caf8b4d8c6852df4e8dfd16889297
-size 15036
diff --git a/mojo-executor-parent-2.4.0.tar.gz b/mojo-executor-parent-2.4.0.tar.gz
new file mode 100644
index 0000000..18d832f
--- /dev/null
+++ b/mojo-executor-parent-2.4.0.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:fecefcb8d2192500fa962e111c8a4d3cb0680c9c111b312904399915abec9547
+size 16841
diff --git a/mojo-executor.changes b/mojo-executor.changes
index 09b0c15..7c17c81 100644
--- a/mojo-executor.changes
+++ b/mojo-executor.changes
@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Sun Dec  4 14:43:21 UTC 2022 - Dirk Müller <dmueller@suse.com>
+
+- update to 2.4.0:
+  * Dependencies provided by Maven have been moved to the provided scope where
+    possible
+  * The plexus-utils dependency must remain in the compile scope due to
+    MNG-6965. It has been updated to version 3.0.24 to avoid spurious security
+    vulnerability notifications due to this dependency.
+
 -------------------------------------------------------------------
 Sun Nov 24 16:51:15 UTC 2019 - Fridrich Strba <fstrba@suse.com>
 
diff --git a/mojo-executor.spec b/mojo-executor.spec
index a6d2eec..950d6bf 100644
--- a/mojo-executor.spec
+++ b/mojo-executor.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package mojo-executor
 #
-# Copyright (c) 2019 SUSE LLC
+# Copyright (c) 2022 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,13 +17,13 @@
 
 
 Name:           mojo-executor
-Version:        2.3.1
+Version:        2.4.0
 Release:        0
 Summary:        Mojo Executor
 License:        Apache-2.0
 Group:          Development/Libraries/Java
-URL:            http://timmoore.github.io/mojo-executor/
-Source0:        https://github.com/TimMoore/%{name}/archive/%{name}-parent-%{version}.tar.gz
+URL:            https://mojo-executor.github.io/mojo-executor/
+Source0:        https://github.com/mojo-executor/mojo-executor/archive/refs/tags/mojo-executor-parent-%{version}.tar.gz
 Source1:        http://www.apache.org/licenses/LICENSE-2.0
 Patch0:         mojo-executor-dependency.patch
 BuildRequires:  fdupes