diff --git a/_service b/_service
index 62e4411..4353543 100644
--- a/_service
+++ b/_service
@@ -3,7 +3,7 @@
     <param name="url">https://github.com/anchore/syft</param>
     <param name="scm">git</param>
     <param name="exclude">.git</param>
-    <param name="revision">v1.3.0</param>
+    <param name="revision">v1.4.0</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="changesgenerate">enable</param>
     <param name="versionrewrite-pattern">v(.*)</param>
diff --git a/_servicedata b/_servicedata
index be35be2..b613e8a 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/anchore/syft</param>
-              <param name="changesrevision">87cd6c8c48239a20c413f6461e90000ff30ee601</param></service></servicedata>
\ No newline at end of file
+              <param name="changesrevision">4194a2cd34d2f15dd9a96774ba2fbc5463db4c58</param></service></servicedata>
\ No newline at end of file
diff --git a/syft-1.3.0.obscpio b/syft-1.3.0.obscpio
deleted file mode 100644
index 9d8142d..0000000
--- a/syft-1.3.0.obscpio
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:bba99c751e967c8fcc2ce637411bcd3949c3ae362fb90747c26fb283bbe7dab8
-size 24257549
diff --git a/syft-1.4.0.obscpio b/syft-1.4.0.obscpio
new file mode 100644
index 0000000..eeeba36
--- /dev/null
+++ b/syft-1.4.0.obscpio
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:29011fbac8d476f4682a492bf25a4f4149b55464b32b3f6c65f4a232492cbef0
+size 24391181
diff --git a/syft.changes b/syft.changes
index 7be210f..9c113d8 100644
--- a/syft.changes
+++ b/syft.changes
@@ -1,3 +1,53 @@
+-------------------------------------------------------------------
+Thu May 09 18:59:36 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 1.4.0:
+  * feat: add relationships to ELF package discovery (#2715)
+  * README.md: link to official wiki (#2858)
+  * fix Windows file paths in local go mod cache (#2654)
+  * chore(deps): bump github.com/docker/docker (#2859)
+  * chore(deps): bump github.com/charmbracelet/bubbletea (#2860)
+  * chore(deps): bump github/codeql-action from 3.25.3 to 3.25.4
+    (#2855)
+  * chore(deps): bump github.com/sassoftware/go-rpmutils from 0.3.0
+    to 0.4.0 (#2856)
+  * Add relationships for ALPM packages (arch linux) (#2851)
+  * Add binary classifier for ArangoDB (#2830)
+  * chore(deps): bump golang.org/x/net from 0.24.0 to 0.25.0
+    (#2849)
+  * chore(deps): bump actions/checkout from 4.1.4 to 4.1.5 (#2850)
+  * chore: use ruleguard to test for missing defer statements
+    (#2837)
+  * remove homebrew update workflow (#2846)
+  * Restore version file update on release (#2844)
+  * fix: Add missing CPE for traefik, memcached, and postgres
+    binaries (#2845)
+  * Add detection for newer version of ErLang/OTP (#2829)
+  * fix ui race for package count (#2839)
+  * chore(deps): update CPE dictionary index (#2841)
+  * chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.5.8 to
+    6.5.9 (#2842)
+  * chore(deps): bump modernc.org/sqlite from 1.29.8 to 1.29.9
+    (#2843)
+  * chore(deps): bump github.com/charmbracelet/bubbletea (#2838)
+  * add security policy (#2835)
+  * chore(deps): bump actions/setup-go from 5.0.0 to 5.0.1 (#2834)
+  * chore(deps): update stereoscope to
+    2e9894674185d121917b283f773c2b5830f8b360 (#2831)
+  * chore(deps): bump github.com/charmbracelet/bubbletea (#2833)
+  * chore: fix function name in comment (#2771)
+  * chore: enable go-critic deferInLoop lint (#2825)
+  * fix: better clean up of file handles (#2823)
+  * chore(deps): bump github.com/docker/docker (#2827)
+  * fix(spdx): include required fields (#2168)
+  * fix: add correct vendor for dnsmasq CPE (#2659)
+  * fix: close temp rpmdb file (#2792)
+  * chore(deps): bump github/codeql-action from 3.25.2 to 3.25.3
+    (#2817)
+  * Fill in SPDX originator for all supported package types (#2822)
+  * chore(deps): bump anchore/sbom-action from 0.15.10 to 0.15.11
+    (#2821)
+
 -------------------------------------------------------------------
 Fri Apr 26 16:46:01 UTC 2024 - opensuse_buildservice@ojkastl.de
 
diff --git a/syft.obsinfo b/syft.obsinfo
index 5343efa..1c25140 100644
--- a/syft.obsinfo
+++ b/syft.obsinfo
@@ -1,4 +1,4 @@
 name: syft
-version: 1.3.0
-mtime: 1714143055
-commit: 87cd6c8c48239a20c413f6461e90000ff30ee601
+version: 1.4.0
+mtime: 1715277239
+commit: 4194a2cd34d2f15dd9a96774ba2fbc5463db4c58
diff --git a/syft.spec b/syft.spec
index 7be298a..8cc9499 100644
--- a/syft.spec
+++ b/syft.spec
@@ -19,7 +19,7 @@
 %define __arch_install_post export NO_BRP_STRIP_DEBUG=true
 
 Name:           syft
-Version:        1.3.0
+Version:        1.4.0
 Release:        0
 Summary:        CLI tool and library for generating a Software Bill of Materials
 License:        Apache-2.0
diff --git a/vendor.tar.gz b/vendor.tar.gz
index 7efa964..e54b0f2 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:762c7f7f07b1cbf4d7919721972df857fcfd9161c6a56d1ef6ed3e9425ac033b
-size 49345629
+oid sha256:1dcc87dd6a64a290bb5f3c5d347a5e2ec7a99d09a0e8fc5720eae83d95e057d0
+size 49340768