diff --git a/_service b/_service
index 7672579..1abce28 100644
--- a/_service
+++ b/_service
@@ -3,7 +3,7 @@
     <param name="url">https://github.com/anchore/syft</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">v0.95.0</param>
+    <param name="revision">v0.96.0</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">enable</param>
     <param name="versionrewrite-pattern">v(.*)</param>
diff --git a/_servicedata b/_servicedata
index 2758f77..e5fb0bf 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/anchore/syft</param>
-              <param name="changesrevision">9b98785aab9346999a0b5e9f5e4b4e63a1b1916c</param></service></servicedata>
\ No newline at end of file
+              <param name="changesrevision">0891d35e0774f175e3a3f170edcce9ad2f4f015b</param></service></servicedata>
\ No newline at end of file
diff --git a/syft-0.95.0.obscpio b/syft-0.95.0.obscpio
deleted file mode 100644
index cc5cc45..0000000
--- a/syft-0.95.0.obscpio
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:b2e7952a75b2311d7b417190005ae069a7282901f9217ca791ecac7c3ce723c1
-size 22596109
diff --git a/syft-0.96.0.obscpio b/syft-0.96.0.obscpio
new file mode 100644
index 0000000..353c983
--- /dev/null
+++ b/syft-0.96.0.obscpio
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:6bd46927a35aef733b4fbc56fa797c935c6763589ff938dbfd1158515d01fc9e
+size 22646285
diff --git a/syft.changes b/syft.changes
index fda1f30..1f0d6bf 100644
--- a/syft.changes
+++ b/syft.changes
@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Thu Nov 09 14:48:04 UTC 2023 - kastl@b1-systems.de
+
+- Update to version 0.96.0:
+  * include image labels in cycloneDX SBOM (#2294)
+  * Add accessPath on Location objects to syft-json output (#2287)
+  * SPDX file has duplicate sha256 tag in versionInfo (#2300)
+  * Check maven central as well for licenses in parents poms for
+    nested jars (#2302)
+  * chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0
+    (#2293)
+  * chore(deps): update tools to latest versions (#2301)
+  * fix: identify cyclone-json without $schema (#2303)
+
 -------------------------------------------------------------------
 Tue Nov 07 20:40:41 UTC 2023 - kastl@b1-systems.de
 
diff --git a/syft.obsinfo b/syft.obsinfo
index 4b1c54d..3062852 100644
--- a/syft.obsinfo
+++ b/syft.obsinfo
@@ -1,4 +1,4 @@
 name: syft
-version: 0.95.0
-mtime: 1699374786
-commit: 9b98785aab9346999a0b5e9f5e4b4e63a1b1916c
+version: 0.96.0
+mtime: 1699485184
+commit: 0891d35e0774f175e3a3f170edcce9ad2f4f015b
diff --git a/syft.spec b/syft.spec
index e7c687b..58a7a83 100644
--- a/syft.spec
+++ b/syft.spec
@@ -19,7 +19,7 @@
 %define __arch_install_post export NO_BRP_STRIP_DEBUG=true
 
 Name:           syft
-Version:        0.95.0
+Version:        0.96.0
 Release:        0
 Summary:        CLI tool and library for generating a Software Bill of Materials
 License:        Apache-2.0
diff --git a/vendor.tar.gz b/vendor.tar.gz
index d119b1d..08ad2e7 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:ecd05d37210daa36ba24c60a990402e6d96b927fef6ce169967121717020e8f3
-size 35911185
+oid sha256:91ae4f68324de27f8e9fda4c59449e5d4f9361a11cfec4ddcaf9066dc9f5be99
+size 35889503