diff --git a/_service b/_service
index c9a8b82..fb57ccd 100644
--- a/_service
+++ b/_service
@@ -3,7 +3,7 @@
     <param name="url">https://github.com/anchore/grype</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">v0.44.0</param>
+    <param name="revision">v0.49.0</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">enable</param>
     <param name="versionrewrite-pattern">v(.*)</param>
@@ -17,6 +17,6 @@
     <param name="compression">gz</param>
   </service>
   <service name="go_modules" mode="disabled">
-    <param name="archive">grype-0.44.0.tar.gz</param>
+    <param name="archive">grype-0.49.0.tar.gz</param>
   </service>
 </services>
diff --git a/_servicedata b/_servicedata
index 039a567..b6837b6 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/anchore/grype</param>
-              <param name="changesrevision">a6ec8f11be5fdc116dc7bbfebdc03bfc13cd2005</param></service></servicedata>
\ No newline at end of file
+              <param name="changesrevision">98104952120d3e368d265566b3d6b415e9da538a</param></service></servicedata>
\ No newline at end of file
diff --git a/grype-0.44.0.tar.gz b/grype-0.44.0.tar.gz
deleted file mode 100644
index c10392d..0000000
--- a/grype-0.44.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:6f0b0d5dde039cd639278ae72692b1ba125f80185b42aa795144082e8abc6640
-size 1091481
diff --git a/grype-0.49.0.tar.gz b/grype-0.49.0.tar.gz
new file mode 100644
index 0000000..542aa87
--- /dev/null
+++ b/grype-0.49.0.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:196fae13bc838bb3bcbbcd8971b508bed724473fb198b59e52b0dce29673a4f6
+size 1098360
diff --git a/grype.changes b/grype.changes
index 7ff3372..4b5dc66 100644
--- a/grype.changes
+++ b/grype.changes
@@ -1,3 +1,61 @@
+-------------------------------------------------------------------
+Wed Sep 07 05:39:15 UTC 2022 - kastl@b1-systems.de
+
+- Update to version 0.49.0:
+  * docs: improve Singularity image source docs (#910)
+  * Add Singularity image source (#908)
+  * Update grype bootstrap tools to latest versions. (#907)
+  * Update Syft to v0.55.0 (#906)
+  * Update grype bootstrap tools to latest versions. (#905)
+  * Update grype bootstrap tools to latest versions. (#903)
+  * Update grype bootstrap tools to latest versions. (#896)
+  * Add blurbs about building and running from source (#893)
+  * Fix docker build typo (#891)
+
+-------------------------------------------------------------------
+Wed Sep 07 05:36:24 UTC 2022 - kastl@b1-systems.de
+
+- Update to version 0.48.0:
+  * disable CPE match filtering based on target software component for java packages (#889)
+  * Update grype bootstrap tools to latest versions. (#886)
+  * fix getting latest gosimports version (#885)
+  * workflow to create automated PRs to update bootstrap tools (#883)
+  * Add s390x build support (#720)
+  * fix: only show distro warning if distro packages exist (#875)
+
+-------------------------------------------------------------------
+Wed Sep 07 05:33:41 UTC 2022 - kastl@b1-systems.de
+
+- Update to version 0.47.0:
+  * Update Syft to v0.54.0 (#881)
+  * Update README.md (#871)
+  * Update README.md (#868)
+
+-------------------------------------------------------------------
+Wed Sep 07 05:30:47 UTC 2022 - kastl@b1-systems.de
+
+- Update to version 0.46.0:
+  * test: rm mustConst since unused (#860)
+  * Update Syft to v0.53.4 (#856)
+  * feat: enrich db check cmd feedback (#853)
+  * update syft version location for Makefile (#865)
+
+-------------------------------------------------------------------
+Wed Sep 07 05:28:51 UTC 2022 - kastl@b1-systems.de
+
+- Update to version 0.45.0:
+  * remove env variable dependencies and keychain from signing script (#864)
+  * macos-latest for signing (#863)
+  * move docker release into separate release workflow (#862)
+  * revert to old docker action (#861)
+  * additional readOptions added  per 855 (#857)
+  * Ensure database access is readonly (#854)
+  * push older version for mac runner stability (#852)
+  * bump bouncer to v0.4.0 (#851)
+  * feat: simple input case to request vulnerability data via purl (#795)
+  * update golanci-lint, goreleaser, cosign (#850)
+  * fix: db diff default has flipped base/target url (#845)
+
 -------------------------------------------------------------------
 Tue Jul 26 11:28:54 UTC 2022 - kastl@b1-systems.de
 
diff --git a/grype.spec b/grype.spec
index 9ce7439..99f082f 100644
--- a/grype.spec
+++ b/grype.spec
@@ -19,7 +19,7 @@
 %define __arch_install_post export NO_BRP_STRIP_DEBUG=true
 
 Name:           grype
-Version:        0.44.0
+Version:        0.49.0
 Release:        0
 Summary:        A vulnerability scanner for container images and filesystems
 License:        Apache-2.0
diff --git a/vendor.tar.gz b/vendor.tar.gz
index 4100360..07e9d03 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:351ee4629b3858f3d882a54469a0e6643c676e580ae04a0938e15b96e143cd00
-size 50958851
+oid sha256:8c80438fb2e43f1033700b55116c2aa91c140ed2c694f9e02aa05c3d858d9476
+size 51178588