diff --git a/_service b/_service
index fe76ce7..bf02d93 100644
--- a/_service
+++ b/_service
@@ -4,7 +4,7 @@
     <param name="scm">git</param>
     <param name="submodules">disable</param>
     <param name="exclude">.git</param>
-    <param name="revision">v15.2.1</param>
+    <param name="revision">v15.2.2</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">disable</param>
     <param name="versionrewrite-pattern">v(.*)</param>
diff --git a/teleport-15.2.1.obscpio b/teleport-15.2.1.obscpio
deleted file mode 100644
index e75475f..0000000
--- a/teleport-15.2.1.obscpio
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:451b1205f777026a3e3d59f473688531d3ab148dbd702668ff018db2fb6b17aa
-size 248533518
diff --git a/teleport-15.2.2.obscpio b/teleport-15.2.2.obscpio
new file mode 100644
index 0000000..0f9f196
--- /dev/null
+++ b/teleport-15.2.2.obscpio
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:139c4482dccfb5901e2876d7cec1bcc761dcf799dfb080787a43c30f2f2c70c5
+size 249049102
diff --git a/teleport.changes b/teleport.changes
index ce31840..f1653a0 100644
--- a/teleport.changes
+++ b/teleport.changes
@@ -1,3 +1,33 @@
+-------------------------------------------------------------------
+Sat Apr 13 09:36:55 UTC 2024 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
+
+- update to 15.2.2:
+  * Updated the cluster selector in the UI to now only be visible
+    when more than one cluster is available. #40478
+  * Fixed accidental passkey "downgrades" to MFA. #40409
+  * Added tsh proxy kube --exec mode that spawns kube proxy in the
+    background, which re-executes the user shell with the
+    appropriate kubeconfig. #40395
+  * Made Amazon S3 fields optional when creating or editing AWS
+    OIDC integration on the web UI. #40368
+  * Fixed a bug that prevented the available logins from being
+    displayed for Windows desktops in leaf clusters that were being
+    accessed via the root cluster web ui. #40367
+  * Changed Teleport Connect to hide cluster name in the connection
+    list if there is only a single cluster available. #40356
+  * Fixed invalid session TTL error when creating access request
+    with tsh. #40335
+  * Added missing discovery AWS matchers fields "Integration" and
+    "KubeAppDiscovery" to the file configuration. #40320
+  * Added automatic role access requests. #40285
+  * Redesigned the login UI. #40272
+  * Added friendly role names for Okta sourced roles. These will be
+    displayed in access list and access request pages in the UI.
+    #40260
+  * Added Teleport Machine ID Workload Identity support for legacy
+    systems which are not able to parse DNS SANs, and which are not
+    SPIFFE aware. #40180
+
 -------------------------------------------------------------------
 Sat Apr  6 20:08:36 UTC 2024 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
 
diff --git a/teleport.obsinfo b/teleport.obsinfo
index 5d1178f..00d81dc 100644
--- a/teleport.obsinfo
+++ b/teleport.obsinfo
@@ -1,4 +1,4 @@
 name: teleport
-version: 15.2.1
-mtime: 1712342966
-commit: 6e72fc78b8fb6960a9533c8ff445fdd65ec1da07
+version: 15.2.2
+mtime: 1712867327
+commit: a4cffd5b7fb8f65a417ce74b42e2f0fbe048c716
diff --git a/teleport.spec b/teleport.spec
index 2d462fe..741630e 100644
--- a/teleport.spec
+++ b/teleport.spec
@@ -19,7 +19,7 @@
 %define __arch_install_post export NO_BRP_STRIP_DEBUG=true
 
 Name:           teleport
-Version:        15.2.1
+Version:        15.2.2
 Release:        0
 Summary:        Identity-aware, multi-protocol access proxy
 License:        Apache-2.0
diff --git a/vendor.tar.gz b/vendor.tar.gz
index b8e081c..d12a7d8 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:ec1549d8f3a34ac772159fdfdb5da3c3776f55b0a80f0ef42fd41133734bdff6
-size 44357080
+oid sha256:ba6584af0f401edf139a7cbd713e05cea5b7cb64ae3e88ec16ae656812242c75
+size 44363518