diff --git a/_scmsync.obsinfo b/_scmsync.obsinfo
index 1649c40..5b74957 100644
--- a/_scmsync.obsinfo
+++ b/_scmsync.obsinfo
@@ -1,4 +1,4 @@
-mtime: 1717679875
-commit: 579ede4865fcf5783c98eab0446e1c095dd85e84
+mtime: 1718202186
+commit: 7d888486b3169cd9355313ba1eb6f09523096cbaa9c86dba517e4115db6fcc09
 url: https://src.opensuse.org/dirkmueller/trivy.git
-revision: 579ede4865fcf5783c98eab0446e1c095dd85e84
+revision: 7d888486b3169cd9355313ba1eb6f09523096cbaa9c86dba517e4115db6fcc09
diff --git a/_service b/_service
index 95a7ab5..3042066 100644
--- a/_service
+++ b/_service
@@ -2,7 +2,7 @@
   <service name="tar_scm" mode="manual">
     <param name="url">https://github.com/aquasecurity/trivy</param>
     <param name="scm">git</param>
-    <param name="revision">v0.52.0</param>
+    <param name="revision">v0.52.1</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>
     <param name="changesgenerate">enable</param>
diff --git a/_servicedata b/_servicedata
index b8663ed..60fedb1 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/aquasecurity/trivy</param>
-              <param name="changesrevision">c24dfbab68056a42aff9589b024c6f2d067f9f52</param></service></servicedata>
\ No newline at end of file
+              <param name="changesrevision">a3caf0658c9eccea18c261123112f2679a205ad9</param></service></servicedata>
\ No newline at end of file
diff --git a/build.specials.obscpio b/build.specials.obscpio
new file mode 100644
index 0000000..439990b
--- /dev/null
+++ b/build.specials.obscpio
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:cbc0ba22346788469a5d0a42b5e805f7dba5a17149b92ea5fa30dd11dca039df
+size 256
diff --git a/trivy-0.52.0.tar.zst b/trivy-0.52.0.tar.zst
deleted file mode 100644
index 6eca2c0..0000000
--- a/trivy-0.52.0.tar.zst
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:9c319b16d0ef066ce3e7b1df0d0cca516f4ebe17a341e329140871ff87c01eb4
-size 51989225
diff --git a/trivy-0.52.1.tar.zst b/trivy-0.52.1.tar.zst
new file mode 100644
index 0000000..9276395
--- /dev/null
+++ b/trivy-0.52.1.tar.zst
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:468105619fa0a066fd1915deadce5bd8b870e6b333b747d76cfabaa1b4a71512
+size 51995809
diff --git a/trivy.changes b/trivy.changes
index c7cd9a1..d6a67f2 100644
--- a/trivy.changes
+++ b/trivy.changes
@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Wed Jun 12 14:19:45 UTC 2024 - dmueller@suse.com
+
+- Update to version 0.52.1:
+  * release: v0.52.1 [release/v0.52] (#6877)
+  * fix(nodejs): fix infinite loop when package link from `package-lock.json` file is broken [backport: release/v0.52] (#6888)
+  * fix(sbom): don't overwrite `srcEpoch` when decoding SBOM files [backport: release/v0.52] (#6881)
+  * fix(python): compare pkg names from `poetry.lock` and `pyproject.toml` in lowercase [backport: release/v0.52] (#6878)
+  * docs: explain how VEX is applied (#6864)
+  * fix(nodejs): fix infinity loops for `pnpm` with cyclic imports (#6857)
+
 -------------------------------------------------------------------
 Thu Jun 06 13:09:56 UTC 2024 - dmueller@suse.com
 
diff --git a/trivy.spec b/trivy.spec
index 92e157e..c1c9e8d 100644
--- a/trivy.spec
+++ b/trivy.spec
@@ -17,7 +17,7 @@
 
 
 Name:           trivy
-Version:        0.52.0
+Version:        0.52.1
 Release:        0
 Summary:        A Simple and Comprehensive Vulnerability Scanner for Containers
 License:        Apache-2.0
diff --git a/vendor.tar.zst b/vendor.tar.zst
index caa255f..51b22f4 100644
--- a/vendor.tar.zst
+++ b/vendor.tar.zst
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:d91678480bb7a66fdec6aa9d971cb4b175f7cf6da8ee2cea5b385522e8feb2b3
-size 35497651
+oid sha256:d7f702a920df8fc129cb96dca47b2e974350041206c71faf4571d896f1f6ed87
+size 35496439