diff --git a/.gitignore b/.gitignore
index 51a3206..e5a1216 100644
--- a/.gitignore
+++ b/.gitignore
@@ -26,3 +26,4 @@ NetworkManager-openswan-0.8.tar.gz
 /NetworkManager-libreswan-1.2.27.tar.gz
 /NetworkManager-libreswan-1.2.27.tar.xz
 /NetworkManager-libreswan-1.2.29.tar.xz
+/NetworkManager-libreswan-1.2.30.tar.xz
diff --git a/NetworkManager-libreswan.spec b/NetworkManager-libreswan.spec
index 9bfa56e..fd22765 100644
--- a/NetworkManager-libreswan.spec
+++ b/NetworkManager-libreswan.spec
@@ -9,8 +9,8 @@
 %bcond_without gtk4
 %endif
 
-%global real_version     1.2.29
-%global rpm_version      1.2.29
+%global real_version     1.2.30
+%global rpm_version      1.2.30
 %global release_version  1
 
 %global real_version_major %(printf '%s' '%{real_version}' | sed -n 's/^\\([1-9][0-9]*\\.[1-9][0-9]*\\)\\.[1-9][0-9]*$/\\1/p')
@@ -127,6 +127,10 @@ rm -f %{buildroot}%{_libdir}/NetworkManager/lib*.la
 %endif
 
 %changelog
+* Mon Jan 12 2026 Vladimír Beneš <vbenes@redhat.com> - 1.2.30-1
+- Upgrade to 1.2.30
+- Declare supports-safe-private-file-access (RHEL-140610)
+
 * Tue Dec 09 2025 Gris Ge <fge@redhat.com> - 1.2.29-1
 - Upgrade to 1.2.29
 - Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-85789)
diff --git a/sources b/sources
index 916967f..5ce91ce 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (NetworkManager-libreswan-1.2.29.tar.xz) = 9cbf439d98292c8af1ee3855b8dde486b4b46fb479b858b10f8e64091c3e47b3cd799ac47348b5be277d24366eb171c09c8f62c2692c0dd92ec2d321abff6e48
+SHA512 (NetworkManager-libreswan-1.2.30.tar.xz) = 8d02b4f39440ec46410d0eccf7faf541df6c1fa8d978fe1b488ee559c3e962e4e0b3e263c65b34a5832250ddd2c5cf2d63ed25fbb06e43ae79c5beee5950cdeb