diff --git a/Changelog.md b/Changelog.md
index 03791a37a8..677ec90024 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,3 +1,9 @@
+# v2.5.9
+
+- Update the VPS scanning plugin:
+  - Resolve issues reading IPR files with null byte content.
+  - Workaround recursive variable declarations when parsing Android.mk files.
+
 # v2.5.8
 
 - Support makefiles in `fossa vps aosp-notice-file` ([#216](https://github.com/fossas/spectrometer/pull/216))
diff --git a/vendor_download.sh b/vendor_download.sh
index 5e517c3e52..dad915eb1a 100755
--- a/vendor_download.sh
+++ b/vendor_download.sh
@@ -41,7 +41,7 @@ esac
 TAG="latest"
 echo "Downloading asset information from latest tag for architecture '$ASSET_POSTFIX'"
 
-WIGGINS_TAG="2021-03-30-28383e8"
+WIGGINS_TAG="2021-04-05-14e2911"
 echo "Downloading wiggins binary"
 echo "Using wiggins release: $WIGGINS_TAG"
 WIGGINS_RELEASE_JSON=vendor/wiggins-release.json