diff --git a/rekor-0.12.1.tar.gz b/rekor-0.12.1.tar.gz
new file mode 100644
index 0000000..4c7b721
--- /dev/null
+++ b/rekor-0.12.1.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:6b87d035974b4749b8151f185bf20f51439f942a962950d10cdeba19bbe41e6d
+size 666476
diff --git a/rekor.changes b/rekor.changes
index 67d111a..bfb2d41 100644
--- a/rekor.changes
+++ b/rekor.changes
@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Tue Sep 27 12:22:57 UTC 2022 - Marcus Meissner <meissner@suse.com>
+
+- updated to rekor 0.12.1 (jsc#SLE-23476):
+  - ** Rekor ** v0.12.1 comes with a breaking change to rekor-cli v0.12.1. Users of rekor-cli MUST upgrade to the latest version
+    The addition of the intotov2 created a breaking change for the rekor-cli
+  - What's Changed
+    - fix: fix harness tests with intoto v0.0.2 by @asraa in #1052
+    - feat: add file based signer and password by @asraa in #1049
+    - Adds new rekor metrics for latency and QPS. by @var-sdk in #1059
+
 -------------------------------------------------------------------
 Thu Sep 15 12:33:21 UTC 2022 - Marcus Meissner <meissner@suse.com>
 
diff --git a/rekor.spec b/rekor.spec
index 857ec3a..15699f0 100644
--- a/rekor.spec
+++ b/rekor.spec
@@ -19,9 +19,9 @@
 %define apps cli server
 
 Name:           rekor
-Version:        0.12.0
+Version:        0.12.1
 Release:        0
-%define revision e7dc6c558491c108ed109557fad5404a5bef2197
+%define revision 584bc16fc8eba7c7663f540dea12730a71f830c1
 Summary:        Supply Chain Transparency Log
 License:        Apache-2.0
 URL:            https://github.com/sigstore/rekor
diff --git a/vendor.tar.xz b/vendor.tar.xz
index e8adf5f..d173745 100644
--- a/vendor.tar.xz
+++ b/vendor.tar.xz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:003916cfc5a81901032d8133cc57e31ecd3c9df922a57cd25c0f7b3d8d5275b8
-size 4054160
+oid sha256:90f3942f84da67b0bf11a72f4b9ef46f995124a35ecb2af6f7ae3941b16b032b
+size 5265555