diff --git a/_service b/_service
index de686ac..64feb70 100644
--- a/_service
+++ b/_service
@@ -4,7 +4,7 @@
     <param name="scm">git</param>
     <param name="submodules">disable</param>
     <param name="exclude">.git</param>
-    <param name="revision">v15.3.6</param>
+    <param name="revision">v15.4.0</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">disable</param>
     <param name="versionrewrite-pattern">v(.*)</param>
diff --git a/teleport-15.3.6.obscpio b/teleport-15.3.6.obscpio
deleted file mode 100644
index da99487..0000000
--- a/teleport-15.3.6.obscpio
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:1ba8aaafe8cc6ec931dd644be2d208a461bba6750e2139993dfd1b1fe960e577
-size 249617422
diff --git a/teleport-15.4.0.obscpio b/teleport-15.4.0.obscpio
new file mode 100644
index 0000000..e57d407
--- /dev/null
+++ b/teleport-15.4.0.obscpio
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:99eac6e8eeeca121e5317aefb0d03fa4c628c5ab262b802912b3f59f8af52ca6
+size 250551310
diff --git a/teleport.changes b/teleport.changes
index 115dfb9..6d07690 100644
--- a/teleport.changes
+++ b/teleport.changes
@@ -1,3 +1,52 @@
+-------------------------------------------------------------------
+Sat Jun  1 09:58:28 UTC 2024 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
+
+- update to 15.4.0:
+  * Access requests notification routing rules
+    Hosted Slack plugin users can now configure notification
+    routing rules for role-based access requests.
+  * Database access for Spanner
+    Database access users can now connect to GCP Spanner.
+  * Unix Workload Attestation
+    Teleport Workload ID now supports basic workload attestation on
+    Unix systems, allowing cluster administrators to restrict the
+    issuance of SVIDs to specific workloads based on UID/PID/GID.
+  * Other improvements and fixes
+    - Fixed an issue where mix-and-match of join tokens could
+      interfere with some services appearing correctly in
+      heartbeats. #42189
+    - Added an alternate EC2 auto discover flow using AWS Systems
+      Manager as a more scalable method than EICE in the "Enroll
+      New Resource" view in the web UI. #42205
+    - Fixed kubectl exec functionality when Teleport is running
+      behind L7 load balancer. #42192
+    - Fixed the plugins AMR cache to be updated when Access
+      requests are removed from the subject of an existing rule.
+      #42186
+    - Improved temporary disk space usage for session recording
+      processing. #42174
+    - Fixed a regression where Kubernetes Exec audit events were
+      not properly populated and lacked error details. #42145
+    - Fixed Azure join method when using Resource Groups in the
+      allow section. #42141
+    - Added new teleport debug set-log-level / profile commands
+      changing instance log level without a restart and collecting
+      pprof profiles. #42122
+    - Added ability to manage access monitoring rules via tctl.
+      #42092
+    - Added access monitoring rule routing for slack access plugin.
+      #42087
+    - Extended Discovery Service to self-bootstrap necessary
+      permissions for Kubernetes Service to interact with the
+      Kubernetes API on behalf of users. #42075
+    - Fixed resource leak in session recording cleanup. #42066
+    - Reduced memory and CPU usage after control plane restarts in
+      clusters with a high number of roles. #42062
+    - Added an option to send a Ctrl+Alt+Del sequence to remote
+      desktops. #41720
+    - Added support for GCP Spanner to Teleport Database Service.
+      #41349
+
 -------------------------------------------------------------------
 Thu May 23 19:36:32 UTC 2024 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
 
diff --git a/teleport.obsinfo b/teleport.obsinfo
index 69d88b5..3b5de87 100644
--- a/teleport.obsinfo
+++ b/teleport.obsinfo
@@ -1,4 +1,4 @@
 name: teleport
-version: 15.3.6
-mtime: 1716463822
-commit: 51cbf3516d3e8287c835fd130975e345023a0b67
+version: 15.4.0
+mtime: 1717175881
+commit: 0da3a67d7d5ab0f5e99b4d1ed4d069750a1ef82c
diff --git a/teleport.spec b/teleport.spec
index 812414c..38502c4 100644
--- a/teleport.spec
+++ b/teleport.spec
@@ -19,7 +19,7 @@
 %define __arch_install_post export NO_BRP_STRIP_DEBUG=true
 
 Name:           teleport
-Version:        15.3.6
+Version:        15.4.0
 Release:        0
 Summary:        Identity-aware, multi-protocol access proxy
 License:        Apache-2.0
diff --git a/vendor.tar.gz b/vendor.tar.gz
index 7caba45..d425126 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:d25db75467482225fcd91b410728c1295ee7dff72ad73c5c97b642a8730d4b34
-size 43831217
+oid sha256:fe4ca358ca1d09edb8d592df76363cf586ac517b8d62375cc0e5ecd8a364e9ef
+size 45252120