diff --git a/_service b/_service
index f85085e..57c80fe 100644
--- a/_service
+++ b/_service
@@ -4,7 +4,7 @@
     <param name="scm">git</param>
     <param name="submodules">disable</param>
     <param name="exclude">.git</param>
-    <param name="revision">v12.1.5</param>
+    <param name="revision">v12.2.1</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">enable</param>
     <param name="versionrewrite-pattern">v(.*)</param>
@@ -26,6 +26,6 @@
     <param name="compression">gz</param>
   </service>
   <service name="go_modules" mode="disabled">
-    <param name="archive">teleport-12.1.5.tar.gz</param>
+    <param name="archive">teleport-12.2.1.tar.gz</param>
   </service>
 </services>
diff --git a/_servicedata b/_servicedata
index 61191b2..3f9e99f 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/gravitational/teleport</param>
-              <param name="changesrevision">54e910b0192e85205a93797bb93e3e70edfa71fb</param></service></servicedata>
\ No newline at end of file
+              <param name="changesrevision">6b7a47352ee7c31c1768626dccc621646256c21e</param></service></servicedata>
\ No newline at end of file
diff --git a/teleport-12.1.5.tar.gz b/teleport-12.1.5.tar.gz
deleted file mode 100644
index f3a91e6..0000000
--- a/teleport-12.1.5.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:994ffd364fe70e48aaf62fb2ab3f9f892c30ad25a81da37acd7992f3d2c3f44c
-size 137419355
diff --git a/teleport-12.2.1.tar.gz b/teleport-12.2.1.tar.gz
new file mode 100644
index 0000000..8ef0708
--- /dev/null
+++ b/teleport-12.2.1.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:293b3d811318a95d07bd1100bf856caa30e41ed1cd265df190bdaf7af5a57b46
+size 138185428
diff --git a/teleport.changes b/teleport.changes
index e7a5f3f..91d809a 100644
--- a/teleport.changes
+++ b/teleport.changes
@@ -1,3 +1,55 @@
+-------------------------------------------------------------------
+Thu Apr 06 03:50:15 UTC 2023 - kastl@b1-systems.de
+
+- Update to version 12.2.1:
+  * Release 12.2.1 (#24098)
+  * [v12] helm: Add support for imagePullSecrets to
+    teleport-cluster chart (#24017)
+  * [v12] chore: Bump Go to 1.20.3 (#24062)
+  * Show the server name (instead of UUID) in errors (#23724)
+    (#23935)
+
+-------------------------------------------------------------------
+Thu Apr 06 03:29:52 UTC 2023 - kastl@b1-systems.de
+
+- Update to version 12.2.0:
+  * Release 12.2.0 (#24056)
+  * fix joining moderated sessions in ui (#24018)
+  * revert marshal database tls mode (#24063)
+  * helm: delete hook-related resource on re-apply (#24068)
+  * Fix listing of participant modes in UI (#24029)
+  * [v12] Add a guide to creating Teleport roles via the API (#24003)
+  * docs: correct mongodb atlas example config (#24044)
+  * Add Azure auto-join docs (#23944)
+  * Replace "Spotlight Search" with "Cross-Cluster Search" (#24049)
+  * Recommend Proxy Service in event-handler guides (#23937)
+  * Add missing `join_method` in azure joining docs (#24031)
+  * [v12] docs: device trust edits (#24025)
+  * [v12] Define an explicit device resource as DeviceV1 (#24024)
+  * [v12] Connect: Collect protocol origin (#24039)
+  * [v12] docs: update version (#24027)
+  * Close auth clients in tctl tests (#24014)
+  * docs: add description of config versions (#23936)
+  * [v12] Headless Login (#23360)
+  * [v12] tsh: Fix redundant error in PPK generation on relogin
+    (#23984)
+  * Allow getting client ip from ProxyHelloSignature for
+    compatibility (#23419)
+  * Update e reference (#24006)
+  * [v12] docs: include enable teleport service in systemctl start
+    (#23988)
+  * [v12] Docs: prefer `curl .../auth/export` instead of `tctl auth
+    export` (#23982)
+  * [v12] docs: Add advisory and troubleshooting on non-tls mode
+    for machineid kube (#23951)
+  * [v12] Backport IP pinning for Kube and DB access (#23418)
+  * Update e reference (#23994)
+  * [v12] GitLab Delegated Joining docs (#23981)
+  * Add Support for Oracle protocol (#23892)
+  * [v12] Metrics: add IsSSO to Discover Events (#23902)
+  * [v12] Add Docker Hub login to Drone's Kubernetes pipelines
+    (#23958)
+
 -------------------------------------------------------------------
 Mon Apr 03 13:17:55 UTC 2023 - kastl@b1-systems.de
 
diff --git a/teleport.spec b/teleport.spec
index 60dbd72..7490baa 100644
--- a/teleport.spec
+++ b/teleport.spec
@@ -19,7 +19,7 @@
 %define __arch_install_post export NO_BRP_STRIP_DEBUG=true
 
 Name:           teleport
-Version:        12.1.5
+Version:        12.2.1
 Release:        0
 Summary:        Identity-aware, multi-protocol access proxy
 License:        Apache-2.0
diff --git a/vendor.tar.gz b/vendor.tar.gz
index ec32b87..d3cfc76 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:8de065b2ce505880ff06d4e1e2aa41d7da4a71f0812b1e1017bc038997f6f7f7
-size 29122287
+oid sha256:bbca4111129162b84b8bd97f3931009d0cca170648479f55a933b0d255342d60
+size 29149759