diff --git a/.gitignore b/.gitignore
index f2a6d5e..bfa642a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -25,3 +25,6 @@
 /noscript-11.4.16.tar.gz
 /noscript-11.4.18.tar.gz
 /nscl-475f1a22fbd8cef9bbf2e08fa13def27435f13ef.tar.gz
+/noscript-11.4.21.tar.gz
+/nscl-0d4cbf9c41b0a636c003fb8c94d2316f969e8be1.tar.gz
+/nscl-f84e94cdcf576ecc25da02d10b6db660c4199dce.tar.gz
diff --git a/mozilla-noscript.spec b/mozilla-noscript.spec
index 797f59b..49218a4 100644
--- a/mozilla-noscript.spec
+++ b/mozilla-noscript.spec
@@ -9,14 +9,14 @@
 # needed for this package
 %global extension_id \{73a6fe31-595d-460b-a920-fcc0f8843232\}
 
-%global nscl_commit 475f1a22fbd8cef9bbf2e08fa13def27435f13ef
+%global nscl_commit f84e94cdcf576ecc25da02d10b6db660c4199dce
 
 Name:           mozilla-noscript
-Version:        11.4.18
+Version:        11.4.21
 Release:        1%{?dist}
 Summary:        JavaScript white list extension for Mozilla Firefox
 
-License:        GPLv3+
+License:        GPL-3.0-or-later AND MIT AND MPL-2.0 AND CC-BY-SA-3.0
 URL:            http://noscript.net/
 Source0:        https://github.com/hackademix/noscript/archive/%{version}/noscript-%{version}.tar.gz
 # https://bugzilla.redhat.com/show_bug.cgi?id=1364409
@@ -78,6 +78,10 @@ appstream-util validate-relax --nonet %{buildroot}%{_datadir}/metainfo/%{name}.m
 %{_datadir}/metainfo/%{name}.metainfo.xml
 
 %changelog
+* Thu Apr 06 2023 Dominik Mierzejewski <dominik@greysector.net> - 11.4.21-1
+- update to 11.4.21 (#2180051)
+- switch to SPDX license identifiers
+
 * Mon Mar 13 2023 Dominik Mierzejewski <dominik@greysector.net> - 11.4.18-1
 - update to 11.4.18 (#2173530)
 
diff --git a/sources b/sources
index fb7215c..546946b 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (noscript-11.4.18.tar.gz) = 93867623fa184d105fa7c1b9ba3362810e8189ec50bc620c4194e15999185c492d34fbf4f4ff3aaf07c837930e06fdb1399f29fa904bd411ff493e22692e5f93
-SHA512 (nscl-475f1a22fbd8cef9bbf2e08fa13def27435f13ef.tar.gz) = 98f86f1de37eb642a212239cf407826f41539b5e954cf706736989e6a53a9dde6bf04582f8bc7b61ab3ba936190d232d8bf973287cc6e921e09688f06c6ba139
+SHA512 (noscript-11.4.21.tar.gz) = d76ad3e0f5d93717eb9436fd98cea03cbda0ecd543c9e07336e2646379123871cdbe5f5921a092ac95665f0c00d965fca71f46633a2edbd99e36541ae7690b52
+SHA512 (nscl-f84e94cdcf576ecc25da02d10b6db660c4199dce.tar.gz) = d9d48f84d904df20e127f96e347635dc57d075aba116d3d441f5c976b8c7a8881213288b09ce0038b9886c7ece4e336cdd1607a76949261d148fc4d006ac4d11