diff --git a/pyotp-2.4.0.tar.gz b/pyotp-2.4.0.tar.gz
deleted file mode 100644
index c74225d..0000000
--- a/pyotp-2.4.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:01eceab573181188fe038d001e42777884a7f5367203080ef5bda0e30fe82d28
-size 14789
diff --git a/pyotp-2.6.0.tar.gz b/pyotp-2.6.0.tar.gz
new file mode 100644
index 0000000..1e15e89
--- /dev/null
+++ b/pyotp-2.6.0.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d28ddfd40e0c1b6a6b9da961c7d47a10261fb58f378cb00f05ce88b26df9c432
+size 15687
diff --git a/python-pyotp.changes b/python-pyotp.changes
index ea7c9be..64ee814 100644
--- a/python-pyotp.changes
+++ b/python-pyotp.changes
@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Wed Mar 24 10:47:36 UTC 2021 - Martin Hauke <mardnh@gmx.de>
+
+- update to 2.6.0
+  * Raise default and minimum base32 secret length to 32, and hex
+    secret length to 40 (160 bits as recommended by the RFC).
+  * Fix issue where provisioning_uri would return invalid results
+    after calling verify().
+- update to 2.5.0
+  * parse_uri accepts and ignores optional image parameter.
+
 -------------------------------------------------------------------
 Fri Aug  7 13:13:17 UTC 2020 - Marketa Calabkova <mcalabkova@suse.com>
 
diff --git a/python-pyotp.spec b/python-pyotp.spec
index e80f3c9..57bd8b3 100644
--- a/python-pyotp.spec
+++ b/python-pyotp.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package python-pyotp
 #
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2021 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -19,7 +19,7 @@
 %{?!python_module:%define python_module() python-%{**} python3-%{**}}
 %define skip_python2 1
 Name:           python-pyotp
-Version:        2.4.0
+Version:        2.6.0
 Release:        0
 Summary:        Python One Time Password Library
 License:        MIT