diff --git a/dnsdiag-2.1.0.tar.gz b/dnsdiag-2.1.0.tar.gz
deleted file mode 100644
index cf5e912..0000000
--- a/dnsdiag-2.1.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:f28df0a73a5199c2c04e55e61156799dfa4a7cb0160fbb2e5bcfa4db221fc671
-size 17267
diff --git a/dnsdiag-2.5.0.tar.gz b/dnsdiag-2.5.0.tar.gz
new file mode 100644
index 0000000..a58922c
--- /dev/null
+++ b/dnsdiag-2.5.0.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:7c5faa9d7c43ff8483c316f0b5adfd68950ae121c2861c92ec13c763fbdd29a5
+size 18871
diff --git a/dnsdiag.changes b/dnsdiag.changes
index 64b3d0c..ec90674 100644
--- a/dnsdiag.changes
+++ b/dnsdiag.changes
@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Thu Jun 20 12:16:30 UTC 2024 - Martin Hauke <mardnh@gmx.de>
+
+- Update to version 2.5.0
+  * Add RFC5001 NSID support (-n or --nsid).
+  * Display RFC8914 Extended DNS Errors when available (-E or --ede)
+  * Add ability to override default RR class (-C or --class).
+  * Display response TTL if applicable (-L or --ttl).
+  * Display first answer in RRSET, when available (-a or --answer).
+  * Add -x to display extra/expert information, implying Flags, EDE
+    and TTL.
+  * Display EDNS flags alongside other response flags, when available
+  * Always display RCODE with responses.
+  * Add more resolvers to the default list.
+  * Lots of bug fixes and UX improvements.
+  * Change default behavior of --edns to disabled by default.
+  * Always display flags in brackets.
+
 -------------------------------------------------------------------
 Sat Feb  4 15:41:21 UTC 2023 - Martin Hauke <mardnh@gmx.de>
 
diff --git a/dnsdiag.spec b/dnsdiag.spec
index 05835e0..52f56bc 100644
--- a/dnsdiag.spec
+++ b/dnsdiag.spec
@@ -1,8 +1,8 @@
 #
 # spec file for package dnsdiag
 #
-# Copyright (c) 2023 SUSE LLC
-# Copyright (c) 2017-2023, Martin Hauke <mardnh@gmx.de>
+# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2017-2024, Martin Hauke <mardnh@gmx.de>
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -19,7 +19,7 @@
 
 %bcond_without test
 Name:           dnsdiag
-Version:        2.1.0
+Version:        2.5.0
 Release:        0
 Summary:        DNS request auditing toolset
 License:        BSD-3-Clause
@@ -33,13 +33,15 @@ Source3:        dnstraceroute.1
 BuildRequires:  fdupes
 BuildRequires:  python-rpm-macros
 BuildRequires:  python3-setuptools
+Requires:       python3-cryptography >= 42.0.7
 Requires:       python3-cymruwhois >= 1.6
-Requires:       python3-dnspython >= 2.3.0
-Requires:       python3-setuptools
+Requires:       python3-dnspython >= 2.6.1
+Requires:       python3-h2 >= 4.1.0
+Requires:       python3-httpx >= 0.27.0
 BuildArch:      noarch
 %if %{with test}
 BuildRequires:  python3-cymruwhois >= 1.6
-BuildRequires:  python3-dnspython >= 2.3.0
+BuildRequires:  python3-dnspython >= 2.6.1
 %endif
 
 %description
@@ -64,6 +66,7 @@ of a resolver.
 
 %prep
 %setup -q -n dnsdiag-%{version}
+sed -e '/^#!\//, 1d' -i util/*.py
 
 %build
 %python3_build