diff --git a/_service b/_service
new file mode 100644
index 0000000..463aebf
--- /dev/null
+++ b/_service
@@ -0,0 +1,5 @@
+<services>
+  <service name="go_modules" mode="manual">
+    <param name="compression">zst</param>
+  </service>
+</services>
diff --git a/rekor-1.3.3.tar.gz b/rekor-1.3.3.tar.gz
deleted file mode 100644
index 867b492..0000000
--- a/rekor-1.3.3.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:2e4e75fcae81ef85e6e3c20e00a9b590bfa86c0706a6c902024222cd61b64c47
-size 890347
diff --git a/rekor-1.3.4.tar.gz b/rekor-1.3.4.tar.gz
new file mode 100644
index 0000000..c6874ba
--- /dev/null
+++ b/rekor-1.3.4.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:08e220b6fbc473ecd3561e88c4fde2ca259f9daa895a17bed1f458c33c33a2b9
+size 851698
diff --git a/rekor.changes b/rekor.changes
index 3620b39..7954be4 100644
--- a/rekor.changes
+++ b/rekor.changes
@@ -1,3 +1,16 @@
+-------------------------------------------------------------------
+Sun Jan 28 18:45:08 UTC 2024 - Dirk Müller <dmueller@suse.com>
+
+- update to 1.3.4:
+  * add mysql indexstorage backend
+  * add s3 storage for attestations
+  * fix: Do not check for pubsub.topics.get on initialization
+  * fix optional field in cose schema
+  * Update ranges.go
+  * update indexstorage interface to reduce roundtrips
+  * use a single validator library in rekor-cli
+  * Remove go-playground/validator dependency from pkg/pki
+
 -------------------------------------------------------------------
 Fri Nov 24 16:03:38 UTC 2023 - Marcus Meissner <meissner@suse.com>
 
diff --git a/rekor.spec b/rekor.spec
index 69b3ed7..4573976 100644
--- a/rekor.spec
+++ b/rekor.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package rekor
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -19,18 +19,18 @@
 %define apps cli server
 
 Name:           rekor
-Version:        1.3.3
+Version:        1.3.4
 Release:        0
-%define revision 2ea1ef00f03b493ace47b1f26a8bfd4ab3b17fe9
+%define revision 5072901241fc6370a78457219e7aa2da490f399f
 Summary:        Supply Chain Transparency Log
 License:        Apache-2.0
 URL:            https://github.com/sigstore/rekor
 Source:         https://github.com/sigstore/rekor/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
-Source1:        vendor.tar.xz
+Source1:        vendor.tar.zst
 Source2:        rekor-zypper-verify.sh
 BuildRequires:  golang-packaging
+BuildRequires:  zstd
 BuildRequires:  golang(API)
-%{go_nostrip}
 
 %description
 Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain. Rekor will enable software maintainers and build systems to record signed metadata to an immutable record. Other parties can then query said metadata to enable them to make informed decisions on trust and non-repudiation of an object's lifecycle. For more details visit the sigstore website
@@ -46,9 +46,9 @@ Rekor fulfils the signature transparency role of sigstore's software signing inf
 DATE_FMT="+%%Y-%%m-%%dT%%H:%%M:%%SZ"
 BUILD_DATE=$(date -u -d "@${SOURCE_DATE_EPOCH}" "${DATE_FMT}" 2>/dev/null || date -u -r "${SOURCE_DATE_EPOCH}" "${DATE_FMT}" 2>/dev/null || date -u "${DATE_FMT}")
 for app in %{apps} ; do
-CLI_PKG=github.com/sigstore/rekor/cmd/rekor-${app}/app
+CLI_PKG=sigs.k8s.io/release-utils/version
 CLI_LDFLAGS="-X ${CLI_PKG}.gitVersion=%{version} -X ${CLI_PKG}.gitCommit=%{revision} -X ${CLI_PKG}.gitTreeState=release -X ${CLI_PKG}.buildDate=${BUILD_DATE}"
-go build -mod=vendor -buildmode=pie -ldflags "${CLI_LDFLAGS}" ./cmd/rekor-${app}
+go build -mod=vendor -trimpath -buildmode=pie -ldflags "${CLI_LDFLAGS}" ./cmd/rekor-${app}
 ./rekor-${app} version
 done
 
diff --git a/vendor.tar.xz b/vendor.tar.xz
deleted file mode 100644
index 58a1eb8..0000000
--- a/vendor.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:891b340a8b408986cc2700606aa511015c62b5f56da828365a022f7e6067d3a2
-size 6234840
diff --git a/vendor.tar.zst b/vendor.tar.zst
new file mode 100644
index 0000000..82fdd89
--- /dev/null
+++ b/vendor.tar.zst
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:88a539d9a7d1fb1a3c6a869a91049cce1831d25aaa78a508d7464bf9cf6e297a
+size 5956954