diff --git a/_service b/_service
index 2d63cb0..d7170c1 100644
--- a/_service
+++ b/_service
@@ -3,7 +3,7 @@
     <param name="url">https://github.com/anchore/syft</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">v0.66.2</param>
+    <param name="revision">v0.68.0</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">enable</param>
     <param name="versionrewrite-pattern">v(.*)</param>
@@ -16,6 +16,6 @@
     <param name="compression">gz</param>
   </service>
   <service name="go_modules" mode="disabled">
-    <param name="archive">syft-0.66.2.tar.gz</param>
+    <param name="archive">syft-0.68.0.tar.gz</param>
   </service>
 </services>
diff --git a/_servicedata b/_servicedata
index 1941b88..7bd67a3 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/anchore/syft</param>
-              <param name="changesrevision">03971ace43b877e371c13e3f786c1f6c3a4ec507</param></service></servicedata>
\ No newline at end of file
+              <param name="changesrevision">e58050bac045be672621047d5699b88884e2da62</param></service></servicedata>
\ No newline at end of file
diff --git a/syft-0.66.2.tar.gz b/syft-0.66.2.tar.gz
deleted file mode 100644
index 683d127..0000000
--- a/syft-0.66.2.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:80a2060f6c186c40aa1f2bb1e3d0efb89b54af0a8e0e2115aea9af7ac4fbbea4
-size 5490405
diff --git a/syft-0.68.0.tar.gz b/syft-0.68.0.tar.gz
new file mode 100644
index 0000000..cb88084
--- /dev/null
+++ b/syft-0.68.0.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:09662ca6fef34720bdf28b4e26d8f6da14f946b6e547e618b96ab3f743b71d0a
+size 5481209
diff --git a/syft.changes b/syft.changes
index 8c2b69a..9e28d82 100644
--- a/syft.changes
+++ b/syft.changes
@@ -1,3 +1,33 @@
+-------------------------------------------------------------------
+Sat Jan 21 07:53:06 UTC 2023 - kastl@b1-systems.de
+
+- Update to version 0.68.0:
+  * Fix panic in apkdb parsing on empty "provides" values (#1494)
+  * push detailed log statements to trace-level (#1500)
+  * npm: package-lock license decoding to accept string or array (#1482)
+  * always set the package ID for java packages (#1493)
+  * fix: skip filling in empty fields in APK metadata (#1484)
+  * chore(deps): bump github.com/facebookincubator/nvdtools (#1499)
+  * chore(deps): bump github.com/jinzhu/copier from 0.3.2 to 0.3.5 (#1498)
+  * chore(deps): bump github.com/vbatts/go-mtree from 0.5.0 to 0.5.2 (#1497)
+  * chore(deps): bump github.com/gookit/color from 1.4.2 to 1.5.2 (#1496)
+  * chore(deps): bump github.com/spf13/viper from 1.14.0 to 1.15.0 (#1495)
+  * Relax error conditions for catalogers (#1492)
+  * feat: add memcached classifier (#1486)
+  * chore(deps): bump github.com/spf13/viper from 1.13.0 to 1.14.0 (#1488)
+  * chore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.0.2 to 4.6.0 (#1489)
+  * chore(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 (#1490)
+  * chore(deps): bump github.com/go-test/deep from 1.0.8 to 1.1.0 (#1491)
+  * chore(deps): bump github.com/google/go-containerregistry (#1487)
+  * chore(deps): bump golang.org/x/net from 0.4.0 to 0.5.0 (#1475)
+  * chore(deps): bump github.com/adrg/xdg from 0.3.3 to 0.4.0 (#1477)
+  * chore(deps): bump github.com/sergi/go-diff from 1.2.0 to 1.3.1 (#1476)
+  * chore(deps): bump github.com/vifraa/gopom from 0.1.0 to 0.2.1 (#1474)
+  * chore(deps): bump github/codeql-action from 1 to 2 (#1473)
+  * chore(deps): bump actions/setup-go from 2 to 3 (#1472)
+  * Add dependabot (#1451)
+- skip non-existent release 0.67.x
+
 -------------------------------------------------------------------
 Fri Jan 20 09:56:19 UTC 2023 - kastl@b1-systems.de
 
diff --git a/syft.spec b/syft.spec
index 95808d4..c934c16 100644
--- a/syft.spec
+++ b/syft.spec
@@ -19,7 +19,7 @@
 %define __arch_install_post export NO_BRP_STRIP_DEBUG=true
 
 Name:           syft
-Version:        0.66.2
+Version:        0.68.0
 Release:        0
 Summary:        CLI tool and library for generating a Software Bill of Materials
 License:        Apache-2.0
diff --git a/vendor.tar.gz b/vendor.tar.gz
index 2ac8ef5..6348f0d 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:f1ff5bb4303af43798e547c3dc407fca39d8eb153246b78b637679078353d062
-size 41152379
+oid sha256:363a3dda1ccfce1b63f70de0a2baea58b22797e881012da141f60d37bd4ab9ab
+size 41211777