diff --git a/composer.spec b/composer.spec
index 944335e..0496750 100644
--- a/composer.spec
+++ b/composer.spec
@@ -18,7 +18,7 @@
 %bcond_with          syslib
 %endif
 
-%global gh_commit    c3777ea50f5ad561d4796b42fba4d180bb45cf77
+%global gh_commit    b0024890b8650e52d1a29822856b3c95aa393785
 %global gh_short     %(c=%{gh_commit}; echo ${c:0:7})
 %global gh_branch    2.0-dev
 %global gh_owner     composer
@@ -26,7 +26,7 @@
 %global api_version  2.3.0
 %global run_version  2.2.2
 
-%global upstream_version 2.3.2
+%global upstream_version 2.3.3
 #global upstream_prever  RC2
 #global upstream_lower   rc2
 
@@ -132,14 +132,14 @@ Requires:       ca-certificates
 Provides:       bundled(php-composer-ca-bundle) = 1.3.1
 Provides:       bundled(php-composer-metadata-minifier) = 1.0.0
 Provides:       bundled(php-composer-pcre) = 2.0.0
-Provides:       bundled(php-composer-semver) = 3.3.1
+Provides:       bundled(php-composer-semver) = 3.3.2
 Provides:       bundled(php-composer-spdx-licenses) = 1.5.6
 Provides:       bundled(php-composer-xdebug-handler) = 3.0.3
 Provides:       bundled(php-justinrainbow-json-schema) = 5.2.11
 Provides:       bundled(php-psr-container) = 1.1.1
 Provides:       bundled(php-psr-log) = 1.1.4
 Provides:       bundled(php-react-promise) = v2.9.0
-Provides:       bundled(php-seld-jsonlint) = 1.8.3
+Provides:       bundled(php-seld-jsonlint) = 1.9.0
 Provides:       bundled(php-seld-phar-utils) = 1.2.0
 Provides:       bundled(php-symfony-console) = v5.4.5
 Provides:       bundled(php-symfony-deprecation-contracts) = v2.5.0
@@ -381,6 +381,9 @@ exit $ret
 
 
 %changelog
+* Sat Apr  2 2022 Remi Collet <remi@remirepo.net> - 2.3.3-1
+- update to 2.3.3
+
 * Thu Mar 31 2022 Remi Collet <remi@remirepo.net> - 2.3.2-1
 - update to 2.3.2
 
diff --git a/sources b/sources
index 28d0e86..50cfe3d 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (composer-2.3.2-c3777ea.tgz) = d86dfd652e4fe7f67763c0e8bdc927954081310813fa92094261afdf7fbd63f84a241a8a4def6c1e1fedaabd40638f4be34d960940904cf2a01c2dcf26315248
+SHA512 (composer-2.3.3-b002489.tgz) = 2e4d88a6a8a7561847d9f81a1aa2cede467591250e50a1208502e2d708d5165432d3ab1cf4cd9a15f30f882092727d545fa8deaae97d079500c85ad1c70b2e07