diff --git a/.gitignore b/.gitignore
index 3c87b13..0074695 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,4 @@
 /gpg-117E8C168EFE3A7F.key
 /weldr-client-35.1.tar.gz
+/weldr-client-35.2.tar.gz
+/weldr-client-35.2.tar.gz.asc
diff --git a/sources b/sources
index b219810..733d5d2 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,3 @@
-SHA512 (gpg-117E8C168EFE3A7F.key) = 36712a4e05cbb2ca139e777d8b2abe4ee0536f970208c2c2c1a50a2294979b828a9d6abcbad1dce3cc015a0c4364ab87ab04cb459811ad3aca5cf6611093b9bd
-SHA512 (weldr-client-35.1.tar.gz) = 8508b446c44eae917710083c8185054e3a89f799723b71e2d0069ce35c653ea2adabcab3b8d7d9a903f127798368933ba765c603ebed4fe3f6c6187c032a793c
+SHA512 (weldr-client-35.2.tar.gz) = 15be056982683b9b8d5485ff9aa48dff237a48c3ee9d104c0de16898653facb0a63371a8d31bdf3fb19034022411c8d77e2358b22de52d23768cc7363f4926de
+SHA512 (weldr-client-35.2.tar.gz.asc) = 7aabc7faaedc8c1d87a7b182348aa11a52db8425c7327fe52c560d2a861643e27f6d53628d4261027b092198003f02f12ad3ccb98f8f4ce8ce9e1f39fd67b556
+SHA512 (gpg-117E8C168EFE3A7F.key) = 9c760460e3227848c99a1178828512056ac04f518f98bdab5ef36d2aa31c4e5dcda3800d7141cfaf7f2acd0f7f35d4b9971083b6f14f8a36231b74041d4ed88d
diff --git a/weldr-client-35.1.tar.gz.asc b/weldr-client-35.1.tar.gz.asc
deleted file mode 100644
index df7d102..0000000
--- a/weldr-client-35.1.tar.gz.asc
+++ /dev/null
@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCgAdFiEEtMa0UeT6i0IyyhkeEX6MFo7+On8FAmB0v1oACgkQEX6MFo7+
-On/fBQgAheXV7RRzQEKiYTc53dNKY2+jTzy++W2BpBnpMVIkcu8LjSLQ9sD2AF5o
-90aeeTnMs4o2YKjInj2Rl/TfnA0JfHl+es/QcpKwM6Tl7Znn9570hRy10JuRojSe
-4Lq8wxcr8m5oxAzE1UAvz4ws0xdgHwvhPJJUfMNXANj5BX7M/5A3493zDAkwvQ9H
-3VdPenPgZk2nwjml0IgtTR+sRn1aJC0yXYtcP2bAlOV3sAklVkIGhL3E9bh78Bbj
-oRCN50Bw3jrFmhisfT1HhKtW0B64mg12uIXAqi0S471O4eiy4cF6SFh9L5bSqaTZ
-Zw1nTyzykUR0DCtQ6n/Vcqo7jl8Fsw==
-=YWa+
------END PGP SIGNATURE-----
diff --git a/weldr-client.spec b/weldr-client.spec
index d05a515..3ef3cc4 100644
--- a/weldr-client.spec
+++ b/weldr-client.spec
@@ -1,18 +1,22 @@
 # Pass --with tests to rpmbuild to build composer-cli-tests
 %bcond_with tests
+# Pass --without signed to skip gpg signed tar.gz (DO NOT DO THAT IN PRODUCTION)
+%bcond_without signed
 
 %global goipath         github.com/osbuild/weldr-client
 
 Name:      weldr-client
-Version:   35.1
-Release:   4%{?dist}
+Version:   35.2
+Release:   1%{?dist}
 # Upstream license specification: Apache-2.0
 License:   ASL 2.0
 Summary:   Command line utility to control osbuild-composer
 Url:       %{gourl}
 Source0:   https://github.com/osbuild/weldr-client/releases/download/v%{version}/%{name}-%{version}.tar.gz
+%if %{with signed}
 Source1:   https://github.com/osbuild/weldr-client/releases/download/v%{version}/%{name}-%{version}.tar.gz.asc
 Source2:   https://keys.openpgp.org/vks/v1/by-fingerprint/117E8C168EFE3A7F#/gpg-117E8C168EFE3A7F.key
+%endif
 
 Obsoletes: composer-cli < 35.0
 Provides: composer-cli = %{version}-%{release}
@@ -37,7 +41,9 @@ BuildRequires: gnupg2
 Command line utility to control osbuild-composer
 
 %prep
+%if %{with signed}
 %{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
+%endif
 %if 0%{?rhel}
 %forgeautosetup -p1
 %else
@@ -121,6 +127,27 @@ composer-cli package.
 
 
 %changelog
+* Mon Aug 23 2021 Brian C. Lane <bcl@redhat.com> - 35.2-1
+- New release: 35.2 (bcl)
+  Resolves: rhbz#1996762
+- weldr: Use assert.Contains instead of IsStringInSlice (bcl)
+- Add missing projects depsolve command (bcl)
+- Add support for projects info --distro=DISTRO-NAME (bcl)
+- Add support for projects list --distro=DISTRO-NAME (bcl)
+- Add support for modules info --distro=DISTRO-NAME (bcl)
+- weldr: Add distros to testState (bcl)
+- Add support for modules list --distro=DISTRO-NAME (bcl)
+- weldr: Add AppendQuery helper function (bcl)
+- Add support for compose types --distro=DISTRO-NAME (bcl)
+- composer-cli: Add distros list command (bcl)
+- weldr: Add ListDistros function and tests (bcl)
+- Makefile: Add scratch-srpm and scratch-rpm targets (bcl)
+- Print filename for compose results (bcl)
+- ExcuteTests - return the correct error variables in case of errors (atodorov)
+- The rpm package should obsolete composer-cli from lorax (bcl)
+- tests: Enable CodeCov.io (atodorov)
+- actions: Install lint using GOPATH (bcl)
+
 * Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - 35.1-4
 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
   Related: rhbz#1991688