diff --git a/1.3.6.tar.gz b/1.3.6.tar.gz
deleted file mode 100644
index 5874043..0000000
--- a/1.3.6.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:8b9aec1836f6dfedca79d63108ac82fe8849d473a2c61f5093fbf36af5b10545
-size 51174
diff --git a/python-xmlsec.changes b/python-xmlsec.changes
index d99b346..70b1c8c 100644
--- a/python-xmlsec.changes
+++ b/python-xmlsec.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Tue Jun  2 06:38:20 UTC 2020 - Steve Kowalik <steven.kowalik@suse.com>
+
+- Update to 1.3.8:
+  * No upstream changelog.
+- Drop reproducible.patch, included upstream.
+- Switch to PyPI tarball due to use of setuptools_scm.
+- Update BuildRequires. 
+
 -------------------------------------------------------------------
 Mon Jun 24 04:32:51 UTC 2019 - Bernhard Wiedemann <bwiedemann@suse.com>
 
diff --git a/python-xmlsec.spec b/python-xmlsec.spec
index 7f07a5a..0286ee5 100644
--- a/python-xmlsec.spec
+++ b/python-xmlsec.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package python-xmlsec
 #
-# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2020 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,21 +18,20 @@
 
 %{?!python_module:%define python_module() python-%{**} python3-%{**}}
 Name:           python-xmlsec
-Version:        1.3.6
+Version:        1.3.8
 Release:        0
 Summary:        Python bindings for the XML Security Library
 License:        MIT
-Group:          Development/Languages/Python
 URL:            https://github.com/mehcode/python-xmlsec
-Source:         https://github.com/mehcode/python-xmlsec/archive/%{version}.tar.gz
-# PATCH-FIX-UPSTREAM https://github.com/mehcode/python-xmlsec/pull/91
-Patch0:         reproducible.patch
+Source:         https://files.pythonhosted.org/packages/source/x/xmlsec/xmlsec-%{version}.tar.gz
 BuildRequires:  %{python_module devel}
 BuildRequires:  %{python_module lxml >= 3.0}
 BuildRequires:  %{python_module lxml-devel}
 BuildRequires:  %{python_module pkgconfig}
 BuildRequires:  %{python_module pytest}
+BuildRequires:  %{python_module setuptools_scm}
 BuildRequires:  %{python_module setuptools}
+BuildRequires:  %{python_module toml}
 BuildRequires:  fdupes
 BuildRequires:  libtool
 BuildRequires:  pkgconfig
@@ -50,8 +49,7 @@ Requires:       python-pkgconfig
 Python bindings for the XML Security Library
 
 %prep
-%setup -q
-%patch0 -p1
+%setup -q -n xmlsec-%{version}
 
 %build
 export CFLAGS="%{optflags}"
diff --git a/reproducible.patch b/reproducible.patch
deleted file mode 100644
index 4f4aafe..0000000
--- a/reproducible.patch
+++ /dev/null
@@ -1,15 +0,0 @@
-https://github.com/mehcode/python-xmlsec/pull/91
-
-Index: xmlsec-1.3.3/xmlsec_setupinfo.py
-===================================================================
---- xmlsec-1.3.3.orig/xmlsec_setupinfo.py
-+++ xmlsec-1.3.3/xmlsec_setupinfo.py
-@@ -34,7 +34,7 @@ def description():
- 
- 
- def sources():
--    return glob.glob(os.path.join(get_base_dir(), "src", "*.c"))
-+    return sorted(glob.glob(os.path.join(get_base_dir(), "src", "*.c")))
- 
- 
- def define_macros():
diff --git a/xmlsec-1.3.8.tar.gz b/xmlsec-1.3.8.tar.gz
new file mode 100644
index 0000000..d4e632d
--- /dev/null
+++ b/xmlsec-1.3.8.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:86943fe2b31cd3b584d23987f404e9309f5251019c15bb565b3a65a4799425ce
+size 59363