diff --git a/rekor-0.8.1.tar.gz b/rekor-0.8.1.tar.gz
deleted file mode 100644
index ea3049a..0000000
--- a/rekor-0.8.1.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:f4b2f4f8cdf1f38abdff7d4e1d9bdbfa5937fded00c04ebc33fd76c2d3b641ba
-size 686912
diff --git a/rekor-0.9.1.tar.gz b/rekor-0.9.1.tar.gz
new file mode 100644
index 0000000..a8aad2d
--- /dev/null
+++ b/rekor-0.9.1.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:7a2653a6cbc21bd54858958ed7666f55963c0879b2eaed28d8a00a3e8814a696
+size 679191
diff --git a/rekor.changes b/rekor.changes
index 01b2ac2..e112ae7 100644
--- a/rekor.changes
+++ b/rekor.changes
@@ -1,3 +1,23 @@
+-------------------------------------------------------------------
+Wed Jul 27 13:26:17 UTC 2022 - Marcus Meissner <meissner@suse.com>
+
+- updated to rekor 0.9.1
+  - feat: add subject URIs to index for x509 certificates by @asraa in #897
+  - fix: sql syntax in dbcreate script by @xens in #903
+  - Switch to go 1.18 and pin release-utils to v0.7.1 by @saschagrunert in #904
+  - Check inactive shards for UUID for /retrieve endpoint by @priyawadhwa in #905
+  - ensure log messages have requestID where possible by @bobcallaway in #907
+  - Remove unnecessary lookup of non-existent attestations from storage layer by @bobcallaway in #909
+  - Fix bug where /retrieve endpoint returns wrong logIndex across shards by @priyawadhwa in #908
+
+- updated to rekor 0.9.0
+  - Add COSE support to Rekor by @kommendorkapten in #867
+  - Fix intoto index keys by @bobcallaway in #889
+  - Resolve virtual log index when calling /retrieve endpoint by @priyawadhwa in #894
+- updated to rekor 0.8.2
+  - collect docker-compose logs if sharding tests fail, also trim IDs by @bobcallaway in #869
+  - ensure fallback logic executes if attestation key is empty when fetching attestation by @bobcallaway in #878
+
 -------------------------------------------------------------------
 Wed Jun 29 12:26:43 UTC 2022 - Marcus Meissner <meissner@suse.com>
 
diff --git a/rekor.spec b/rekor.spec
index d98d734..206884d 100644
--- a/rekor.spec
+++ b/rekor.spec
@@ -19,7 +19,7 @@
 %define apps cli server
 
 Name:           rekor
-Version:        0.8.1
+Version:        0.9.1
 Release:        0
 %define revision e981811726530c70ec707902022c336d1f1c37b4
 Summary:        Supply Chain Transparency Log
diff --git a/vendor.tar.xz b/vendor.tar.xz
index c8f6dec..1ac25b1 100644
--- a/vendor.tar.xz
+++ b/vendor.tar.xz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:dc4c3578f4edc4d79cba0d5e1aa7d069472599d55c739418e0dc4e07f8b28808
-size 3900716
+oid sha256:0aa2ef80151c489b9de5ec06730eae2e524ab29906ed4a6614dbd996b15524f0
+size 3970372