diff --git a/_service b/_service
index 77549c3..8b39141 100644
--- a/_service
+++ b/_service
@@ -3,7 +3,7 @@
     <param name="url">https://github.com/anchore/syft</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">v0.62.0</param>
+    <param name="revision">v0.62.1</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">enable</param>
     <param name="versionrewrite-pattern">v(.*)</param>
@@ -16,6 +16,6 @@
     <param name="compression">gz</param>
   </service>
   <service name="go_modules" mode="disabled">
-    <param name="archive">syft-0.62.0.tar.gz</param>
+    <param name="archive">syft-0.62.1.tar.gz</param>
   </service>
 </services>
diff --git a/_servicedata b/_servicedata
index c1910cf..4d4747e 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/anchore/syft</param>
-              <param name="changesrevision">da4b2df57640e03f273a2e7e9b04eca40555e139</param></service></servicedata>
\ No newline at end of file
+              <param name="changesrevision">098e61dcc81d7a6d666bc62a2166c9b8f32c61bc</param></service></servicedata>
\ No newline at end of file
diff --git a/syft-0.62.0.tar.gz b/syft-0.62.0.tar.gz
deleted file mode 100644
index 89c8191..0000000
--- a/syft-0.62.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a0a8f2ba87df796226fd8488b84b51fd484785240feca0f22d9542d0bff33162
-size 3871816
diff --git a/syft-0.62.1.tar.gz b/syft-0.62.1.tar.gz
new file mode 100644
index 0000000..99e517d
--- /dev/null
+++ b/syft-0.62.1.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d437918f0b04093b8ddeed8aad0fd6fdef8cfb90989b7bc35ccd92288f676c75
+size 3872251
diff --git a/syft.changes b/syft.changes
index 7ea74e1..9181ee0 100644
--- a/syft.changes
+++ b/syft.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Mon Nov 21 15:12:29 UTC 2022 - kastl@b1-systems.de
+
+- Update to version 0.62.1:
+  * fix: sort relationships in SPDX output (#1350)
+  * chore: add debug logging for decode errors (#1352)
+  * feat(npm): handle aliases in package-lock.json (#1349)
+
 -------------------------------------------------------------------
 Sat Nov 19 12:04:28 UTC 2022 - kastl@b1-systems.de
 
diff --git a/syft.spec b/syft.spec
index d1427e3..60f3671 100644
--- a/syft.spec
+++ b/syft.spec
@@ -19,7 +19,7 @@
 %define __arch_install_post export NO_BRP_STRIP_DEBUG=true
 
 Name:           syft
-Version:        0.62.0
+Version:        0.62.1
 Release:        0
 Summary:        CLI tool and library for generating a Software Bill of Materials
 License:        Apache-2.0
diff --git a/vendor.tar.gz b/vendor.tar.gz
index 336e5ba..6b6efc6 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:68d2302e565805612ece5354606be8fe9b6526465348154a0f1a3110339b6c03
-size 51476686
+oid sha256:82c3d34c4dd89d9d5c8fb0ac3d54f2593cfd2b48035dc6ec9ad9ed44daef8553
+size 51476604