diff --git a/itsdangerous-1.1.0.tar.gz b/itsdangerous-1.1.0.tar.gz
deleted file mode 100644
index bafcf0f..0000000
--- a/itsdangerous-1.1.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:321b033d07f2a4136d3ec762eac9f16a10ccd60f53c0c91af90217ace7ba1f19
-size 53219
diff --git a/itsdangerous-2.0.1.tar.gz b/itsdangerous-2.0.1.tar.gz
new file mode 100644
index 0000000..7e09868
--- /dev/null
+++ b/itsdangerous-2.0.1.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:9e724d68fc22902a1435351f84c3fb8623f303fffcc566a4cb952df8c572cff0
+size 59336
diff --git a/python-itsdangerous.changes b/python-itsdangerous.changes
index 6d27119..a0dddc3 100644
--- a/python-itsdangerous.changes
+++ b/python-itsdangerous.changes
@@ -1,3 +1,33 @@
+-------------------------------------------------------------------
+Sat Jun 19 07:34:21 UTC 2021 - Michael Ströder <michael@stroeder.com>
+
+- update to version 2.0.1
+  * Version 2.0.1
+    - Mark top-level names as exported so type checking understands imports 
+      in user projects. #240
+    - The salt argument to Serializer and Signer can be None again. #237
+  * Version 2.0.0
+    - Drop support for Python 2 and 3.5.
+    - JWS support (JSONWebSignatureSerializer, 
+      TimedJSONWebSignatureSerializer) is deprecated. Use a dedicated JWS/JWT 
+      library such as authlib instead. #129
+    - Importing itsdangerous.json is deprecated. Import Python’s json module instead. #152
+    - Simplejson is no longer used if it is installed. To use a different 
+      library, pass it as Serializer(serializer=...). #146
+    - datetime values are timezone-aware with timezone.utc. Code using 
+      TimestampSigner.unsign(return_timestamp=True) or 
+      BadTimeSignature.date_signed may need to change. #150
+    - If a signature has an age less than 0, it will raise SignatureExpired 
+      rather than appearing valid. This can happen if the timestamp offset is 
+      changed. #126
+    - BadTimeSignature.date_signed is always a datetime object rather than an 
+      int in some cases. #124
+    - Added support for key rotation. A list of keys can be passed as 
+      secret_key, oldest to newest. The newest key is used for signing, all 
+      keys are tried for unsigning. #141
+    - Removed the default SHA-512 fallback signer from default_fallback_signers. #155
+    - Add type information for static typing tools. #186
+
 -------------------------------------------------------------------
 Tue Jun 11 07:52:22 UTC 2019 - Marketa Calabkova <mcalabkova@suse.com>
 
diff --git a/python-itsdangerous.spec b/python-itsdangerous.spec
index fa1efb3..12c4f06 100644
--- a/python-itsdangerous.spec
+++ b/python-itsdangerous.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package python-itsdangerous
 #
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2021 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -16,14 +16,16 @@
 #
 
 
+%define oldpython python
+%define skip_python2 1
 %{?!python_module:%define python_module() python-%{**} python3-%{**}}
 Name:           python-itsdangerous
-Version:        1.1.0
+Version:        2.0.1
 Release:        0
 Summary:        Various helpers to pass trusted data to untrusted environments and back
 License:        BSD-3-Clause
 Group:          Development/Languages/Python
-URL:            http://github.com/mitsuhiko/itsdangerous
+URL:            https://itsdangerous.palletsprojects.com
 Source:         https://files.pythonhosted.org/packages/source/i/itsdangerous/itsdangerous-%{version}.tar.gz
 BuildRequires:  %{python_module freezegun}
 BuildRequires:  %{python_module pytest}