diff --git a/Cargo.toml b/Cargo.toml
index b1d936e6..62291158 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -91,6 +91,6 @@ proxmox-schema = { version = "1.3.6", path = "proxmox-schema" }
 proxmox-serde = { version = "0.1.1", path = "proxmox-serde", features = [ "serde_json" ] }
 proxmox-sortable-macro = { version = "0.1.2", path = "proxmox-sortable-macro" }
 proxmox-sys = { version = "0.4.2", path = "proxmox-sys" }
-proxmox-tfa = { version = "2.1.0", path = "proxmox-tfa" }
+proxmox-tfa = { version = "3.0.0", path = "proxmox-tfa" }
 proxmox-time = { version = "1.1.4", path = "proxmox-time" }
 proxmox-uuid = { version = "1.0.1", path = "proxmox-uuid" }
diff --git a/proxmox-tfa/Cargo.toml b/proxmox-tfa/Cargo.toml
index 00a3866d..484d42cd 100644
--- a/proxmox-tfa/Cargo.toml
+++ b/proxmox-tfa/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "proxmox-tfa"
-version = "2.1.0"
+version = "3.0.0"
 authors.workspace = true
 edition.workspace = true
 license.workspace = true
diff --git a/proxmox-tfa/debian/changelog b/proxmox-tfa/debian/changelog
index 6ed1cdf9..efb92f5a 100644
--- a/proxmox-tfa/debian/changelog
+++ b/proxmox-tfa/debian/changelog
@@ -1,3 +1,16 @@
+rust-proxmox-tfa (3.0.0-1) stable; urgency=medium
+
+  * Make `UserChallengeAccess` object-safe:
+    - drop `Sized` requirement
+    - make `save()` take `&mut self`
+
+  * Drop `Clone` requirement on `OpenUserChallengeData`
+
+  * Drop `Data` associated type from `OpenUserChallengeData`, make methods return
+    `Box<dyn UserChallengeAccess>` instead
+
+ -- Proxmox Support Team <support@proxmox.com>  Thu, 02 Feb 2023 11:03:34 +0100
+
 rust-proxmox-tfa (2.1.0-1) stable; urgency=medium
 
   * expose allow_subdomains property for webauthn, defaulting to true
diff --git a/proxmox-tfa/debian/control b/proxmox-tfa/debian/control
index 17d4acc5..5349d01b 100644
--- a/proxmox-tfa/debian/control
+++ b/proxmox-tfa/debian/control
@@ -42,12 +42,12 @@ Suggests:
  librust-proxmox-tfa+u2f-dev (= ${binary:Version})
 Provides:
  librust-proxmox-tfa+default-dev (= ${binary:Version}),
- librust-proxmox-tfa-2-dev (= ${binary:Version}),
- librust-proxmox-tfa-2+default-dev (= ${binary:Version}),
- librust-proxmox-tfa-2.1-dev (= ${binary:Version}),
- librust-proxmox-tfa-2.1+default-dev (= ${binary:Version}),
- librust-proxmox-tfa-2.1.0-dev (= ${binary:Version}),
- librust-proxmox-tfa-2.1.0+default-dev (= ${binary:Version})
+ librust-proxmox-tfa-3-dev (= ${binary:Version}),
+ librust-proxmox-tfa-3+default-dev (= ${binary:Version}),
+ librust-proxmox-tfa-3.0-dev (= ${binary:Version}),
+ librust-proxmox-tfa-3.0+default-dev (= ${binary:Version}),
+ librust-proxmox-tfa-3.0.0-dev (= ${binary:Version}),
+ librust-proxmox-tfa-3.0.0+default-dev (= ${binary:Version})
 Description: Tfa implementation for totp and u2f - Rust source code
  This package contains the source for the Rust proxmox-tfa crate, packaged by
  debcargo for use with cargo and dh-cargo.
@@ -63,9 +63,9 @@ Depends:
  librust-proxmox-uuid-1+default-dev (>= 1.0.1-~~),
  librust-webauthn-rs-0.3+default-dev
 Provides:
- librust-proxmox-tfa-2+api-dev (= ${binary:Version}),
- librust-proxmox-tfa-2.1+api-dev (= ${binary:Version}),
- librust-proxmox-tfa-2.1.0+api-dev (= ${binary:Version})
+ librust-proxmox-tfa-3+api-dev (= ${binary:Version}),
+ librust-proxmox-tfa-3.0+api-dev (= ${binary:Version}),
+ librust-proxmox-tfa-3.0.0+api-dev (= ${binary:Version})
 Description: Tfa implementation for totp and u2f - feature "api"
  This metapackage enables feature "api" for the Rust proxmox-tfa crate, by
  pulling in any additional dependencies needed by that feature.
@@ -76,12 +76,12 @@ Multi-Arch: same
 Depends:
  ${misc:Depends},
  librust-proxmox-tfa-dev (= ${binary:Version}),
- librust-proxmox-schema-1+api-macro-dev (>= 1.3.5-~~),
- librust-proxmox-schema-1+default-dev (>= 1.3.5-~~)
+ librust-proxmox-schema-1+api-macro-dev (>= 1.3.6-~~),
+ librust-proxmox-schema-1+default-dev (>= 1.3.6-~~)
 Provides:
- librust-proxmox-tfa-2+api-types-dev (= ${binary:Version}),
- librust-proxmox-tfa-2.1+api-types-dev (= ${binary:Version}),
- librust-proxmox-tfa-2.1.0+api-types-dev (= ${binary:Version})
+ librust-proxmox-tfa-3+api-types-dev (= ${binary:Version}),
+ librust-proxmox-tfa-3.0+api-types-dev (= ${binary:Version}),
+ librust-proxmox-tfa-3.0.0+api-types-dev (= ${binary:Version})
 Description: Tfa implementation for totp and u2f - feature "api-types"
  This metapackage enables feature "api-types" for the Rust proxmox-tfa crate, by
  pulling in any additional dependencies needed by that feature.
@@ -96,9 +96,9 @@ Depends:
  librust-serde-1+derive-dev,
  librust-serde-json-1+default-dev
 Provides:
- librust-proxmox-tfa-2+u2f-dev (= ${binary:Version}),
- librust-proxmox-tfa-2.1+u2f-dev (= ${binary:Version}),
- librust-proxmox-tfa-2.1.0+u2f-dev (= ${binary:Version})
+ librust-proxmox-tfa-3+u2f-dev (= ${binary:Version}),
+ librust-proxmox-tfa-3.0+u2f-dev (= ${binary:Version}),
+ librust-proxmox-tfa-3.0.0+u2f-dev (= ${binary:Version})
 Description: Tfa implementation for totp and u2f - feature "u2f"
  This metapackage enables feature "u2f" for the Rust proxmox-tfa crate, by
  pulling in any additional dependencies needed by that feature.