diff --git a/.gitignore b/.gitignore
index 169193c..bc75fa0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-fwupd-efi-1.6.tar.xz
+fwupd-efi-1.8.tar.gz
diff --git a/fwupd-efi.spec b/fwupd-efi.spec
index 3f89ae7..6834dbb 100644
--- a/fwupd-efi.spec
+++ b/fwupd-efi.spec
@@ -1,8 +1,8 @@
 ## START: Set by rpmautospec
-## (rpmautospec version 0.6.5)
+## (rpmautospec version 0.8.1)
 ## RPMAUTOSPEC: autorelease, autochangelog
 %define autorelease(e:s:pb:n) %{?-p:0.}%{lua:
-    release_number = 6;
+    release_number = 1;
     base_release_number = tonumber(rpm.expand("%{?-b*}%{!?-b:1}"));
     print(release_number + base_release_number - 1);
 }%{?-e:.%{-e*}}%{?-s:.%{-s*}}%{!?-n:%{?dist}}.alma.1
@@ -20,12 +20,11 @@
 
 Summary:   Firmware update EFI binaries
 Name:      fwupd-efi
-Version:   1.6
+Version:   1.8
 Release:   %autorelease
 License:   LGPL-2.1-or-later
 URL:       https://github.com/fwupd/fwupd-efi
-Source0:   https://github.com/fwupd/fwupd-efi/releases/download/%{version}/%{name}-%{version}.tar.xz
-
+Source0:   https://github.com/fwupd/%{name}/archive/refs/tags/%{name}-%{version}.tar.gz
 
 # these are the only architectures supporting UEFI UpdateCapsule
 ExclusiveArch: x86_64 aarch64
@@ -47,9 +46,11 @@ the EFI binary that is used for updating using UpdateCapsule.
 %build
 
 %meson \
+    -Dgenpeimg=disabled \
 -Defi_sbat_distro_id="almalinux" \
 -Defi_sbat_distro_summary="AlmaLinux" \
 -Defi_sbat_distro_url="https://git.almalinux.org/rpms/%{name}" \
+    -Dgenpeimg=disabled \
     -Defi_sbat_distro_pkgname="%{name}" \
     -Defi_sbat_distro_version="%{version}-%{release}"
 
@@ -70,25 +71,36 @@ the EFI binary that is used for updating using UpdateCapsule.
 %pesign -s -i %{fwup_efi_fn} -o %{fwup_efi_fn}.signed -a %{sb_ca} -c %{sb_cer} -n %{sb_key}
 rm -vf %{fwup_efi_fn}.tmp
 
+%check
+pesigcheck -i %{fwup_efi_fn}.signed -n0 -c %{sb_cer}
+
 %files
 %doc README.md AUTHORS
 %license COPYING
+%dir %{_libexecdir}/fwupd/efi
 %{_libexecdir}/fwupd/efi/*.efi
 %{_libexecdir}/fwupd/efi/*.efi.signed
 %{_libdir}/pkgconfig/fwupd-efi.pc
 
 %changelog
-* Wed Mar 18 2026 Eduard Abdullin <eabdullin@almalinux.org> - 1.6-6.alma.1
+* Fri Jul 17 2026 Eduard Abdullin <eabdullin@almalinux.org> - 1.8-1.alma.1
 - Use AlmaLinux cert
 
 ## START: Generated by rpmautospec
-* Fri Mar 06 2026 Tomas Pelka <tpelka@redhat.com> - 1.6-6
-- Rebuild for 10.1.z
+* Fri Jul 03 2026 Richard Hughes <richard@hughsie.com> - 1.8-1
+- Sign using the new 803 fwupd-specific certs
 
-* Wed Feb 11 2026 Richard Hughes <richard@hughsie.com> - 1.6-5
-- Do not sign with the test certificate, harder.
+* Wed Feb 11 2026 Richard Hughes <richard@hughsie.com> - 1.6-7
+- Sign using the correct certs for CentOS
 
-* Fri Dec 12 2025 Richard Hughes <richard@hughsie.com> - 1.6-4
+* Wed Feb 11 2026 Tomas Pelka <tpelka@redhat.com> - 1.6-6
+- Adding new UMB message to send within gating so we can trigger based on
+  it in our Jenkins
+
+* Tue Jan 13 2026 Richard Hughes <richard@hughsie.com> - 1.6-5
+- Sign using the correct certs for CentOS
+
+* Wed Nov 12 2025 Richard Hughes <richard@hughsie.com> - 1.6-4
 - Do not sign with the test certificate
 
 * Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 1.6-3
diff --git a/sources b/sources
index 18730b1..f1bf075 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (fwupd-efi-1.6.tar.xz) = 37d3c1348bdead620e626a3e602dc6cd774c47d24ca18a3bf6aee071300d658bc4d37e6ec74fcd20f9b345141d69ea3343d44b9408af4759ad65ef10b72ead69
+SHA512 (fwupd-efi-1.8.tar.gz) = bd361eb60397850af025228ea9f4efbf289f8e1c2612f240ae4c5ffee8caea15c31aa0748c06e57b28a7f38b8c2708147a228d8a99077798f4435436f12e092e