diff --git a/packages/amazon-ssm-agent/Cargo.toml b/packages/amazon-ssm-agent/Cargo.toml
index 2b032122ae4..39c7a171ca5 100644
--- a/packages/amazon-ssm-agent/Cargo.toml
+++ b/packages/amazon-ssm-agent/Cargo.toml
@@ -9,8 +9,8 @@ build = "../build.rs"
 path = "../packages.rs"
 
 [[package.metadata.build-package.external-files]]
-url = "/~https://github.com/aws/amazon-ssm-agent/archive/3.3.40.0/amazon-ssm-agent-3.3.40.0.tar.gz"
-sha512 = "3397dc2604b22f3457c43a0efa3ccadc8d4b5db4036a93413138bf00d0d54c052dfe6d657b21097df94300c7cfb6f8b5b4bd2ddae228957d96c85e08814a9ec5"
+url = "/~https://github.com/aws/amazon-ssm-agent/archive/3.3.131.0/amazon-ssm-agent-3.3.131.0.tar.gz"
+sha512 = "b4c40aabc8da3b5ea3944e420fbe795d0988c57a1eafe8fc6bef6e43f9bf8fb7806213dac7bebe9e5e7e6413a2ddb4057820bcbc399c4c92f6a3ba0078c14bd7"
 
 [build-dependencies]
 glibc = { path = "../glibc" }
diff --git a/packages/amazon-ssm-agent/amazon-ssm-agent.spec b/packages/amazon-ssm-agent/amazon-ssm-agent.spec
index 2794055aa27..568af642023 100644
--- a/packages/amazon-ssm-agent/amazon-ssm-agent.spec
+++ b/packages/amazon-ssm-agent/amazon-ssm-agent.spec
@@ -8,7 +8,7 @@
 %global goimport %{goproject}/%{gorepo}
 
 Name: %{_cross_os}amazon-ssm-agent
-Version: 3.3.40.0
+Version: 3.3.131.0
 Release: 1%{?dist}
 Summary: An agent to enable remote management of EC2 instances
 License: Apache-2.0
diff --git a/packages/ca-certificates/Cargo.toml b/packages/ca-certificates/Cargo.toml
index ba24faf28ba..c79aba72e34 100644
--- a/packages/ca-certificates/Cargo.toml
+++ b/packages/ca-certificates/Cargo.toml
@@ -12,5 +12,5 @@ path = "../packages.rs"
 releases-url = "https://curl.se/docs/caextract.html"
 
 [[package.metadata.build-package.external-files]]
-url = "https://curl.haxx.se/ca/cacert-2023-12-12.pem"
-sha512 = "dcbfe08d39efdd8de555b31e1050757900d08448c61f8a67c055f14514e5d47e734f6874b5ae628021c35ebc8dabdfdac5808df0b3a073d4f9246cca4b725fe8"
+url = "https://curl.haxx.se/ca/cacert-2024-03-11.pem"
+sha512 = "31f03cc19566d007c4cffdad2ada71d99b4734ad7b13bc4f30d73d321f40cbe13b87a801aa61d9788207a851cc1f95a8af8ac732a372d45edb932f204bce3744"
diff --git a/packages/ca-certificates/ca-certificates.spec b/packages/ca-certificates/ca-certificates.spec
index ecffb9f5e2e..b4fdea15ab3 100644
--- a/packages/ca-certificates/ca-certificates.spec
+++ b/packages/ca-certificates/ca-certificates.spec
@@ -1,12 +1,12 @@
 Name: %{_cross_os}ca-certificates
-Version: 2023.12.12
+Version: 2024.03.11
 Release: 1%{?dist}
 Summary: CA certificates extracted from Mozilla
 License: MPL-2.0
 # Note: You can see changes here:
 # https://hg.mozilla.org/projects/nss/log/tip/lib/ckfw/builtins/certdata.txt
 URL: https://curl.haxx.se/docs/caextract.html
-Source0: https://curl.haxx.se/ca/cacert-2023-12-12.pem
+Source0: https://curl.haxx.se/ca/cacert-2024-03-11.pem
 Source1: ca-certificates-tmpfiles.conf
 
 %description
diff --git a/packages/conntrack-tools/0001-disable-RPC-helper.patch b/packages/conntrack-tools/0001-disable-RPC-helper.patch
index bb675050e4e..b98d1d4388f 100644
--- a/packages/conntrack-tools/0001-disable-RPC-helper.patch
+++ b/packages/conntrack-tools/0001-disable-RPC-helper.patch
@@ -1,6 +1,6 @@
-From d45fa29ef802bf5787393e88dd61dabc2999d5ae Mon Sep 17 00:00:00 2001
+From 5a76b5fa1b631191adbec7919f58e067dd6c2896 Mon Sep 17 00:00:00 2001
 From: Ben Cressey <bcressey@amazon.com>
-Date: Mon, 17 Jun 2019 22:40:54 +0000
+Date: Tue, 19 Mar 2024 14:17:52 +0000
 Subject: [PATCH] disable RPC helper
 
 We do not intend to run the daemon to synchronize firewall rules or
@@ -16,10 +16,10 @@ Signed-off-by: Ben Cressey <bcressey@amazon.com>
  2 files changed, 7 deletions(-)
 
 diff --git a/configure.ac b/configure.ac
-index d0565be..a417691 100644
+index da852b1..973a9d5 100644
 --- a/configure.ac
 +++ b/configure.ac
-@@ -50,8 +50,6 @@ AC_ARG_ENABLE([systemd],
+@@ -49,8 +49,6 @@ AC_ARG_ENABLE([systemd],
          AS_HELP_STRING([--enable-systemd], [Build systemd support]),
          [enable_systemd="$enableval"], [enable_systemd="no"])
 
@@ -27,9 +27,9 @@ index d0565be..a417691 100644
 -
  PKG_CHECK_MODULES([LIBNFNETLINK], [libnfnetlink >= 1.0.1])
  PKG_CHECK_MODULES([LIBMNL], [libmnl >= 1.0.3])
- PKG_CHECK_MODULES([LIBNETFILTER_CONNTRACK], [libnetfilter_conntrack >= 1.0.8])
+ PKG_CHECK_MODULES([LIBNETFILTER_CONNTRACK], [libnetfilter_conntrack >= 1.0.9])
 diff --git a/src/helpers/Makefile.am b/src/helpers/Makefile.am
-index e4f10c9..159362f 100644
+index e458ab4..47f1d46 100644
 --- a/src/helpers/Makefile.am
 +++ b/src/helpers/Makefile.am
 @@ -4,7 +4,6 @@ pkglib_LTLIBRARIES = ct_helper_amanda.la \
@@ -52,5 +52,5 @@ index e4f10c9..159362f 100644
  ct_helper_tftp_la_LDFLAGS = $(HELPER_LDFLAGS)
  ct_helper_tftp_la_CFLAGS = $(HELPER_CFLAGS)
 -- 
-2.21.0
+2.40.1
 
diff --git a/packages/conntrack-tools/Cargo.toml b/packages/conntrack-tools/Cargo.toml
index fefd199c1ec..8ed9028c72c 100644
--- a/packages/conntrack-tools/Cargo.toml
+++ b/packages/conntrack-tools/Cargo.toml
@@ -12,8 +12,8 @@ path = "../packages.rs"
 releases-url = "https://www.netfilter.org/projects/conntrack-tools/files"
 
 [[package.metadata.build-package.external-files]]
-url = "https://www.netfilter.org/projects/conntrack-tools/files/conntrack-tools-1.4.7.tar.bz2"
-sha512 = "3d37a6b8cd13fd3c149ab80009d686d2184920ba2d0d5c1b57abed6e92e0dd92cba868bfe22f1a155479fe5ab2e291b8bb8a7e72123a73788032202ac142653b"
+url = "https://www.netfilter.org/projects/conntrack-tools/files/conntrack-tools-1.4.8.tar.xz"
+sha512 = "95d8f6f068c1342ad7e767537e722272a4f5bd8b46b952713ade053a1043aa9ababbe5ce658ede9c77b6de5221b97ad8833777caffd69b67dd70a99f2b45afdf"
 
 [build-dependencies]
 glibc = { path = "../glibc" }
diff --git a/packages/conntrack-tools/conntrack-tools.spec b/packages/conntrack-tools/conntrack-tools.spec
index 9f8bdbda7a8..2d8846c4400 100644
--- a/packages/conntrack-tools/conntrack-tools.spec
+++ b/packages/conntrack-tools/conntrack-tools.spec
@@ -1,11 +1,11 @@
 Name: %{_cross_os}conntrack-tools
-Version: 1.4.7
+Version: 1.4.8
 Release: 1%{?dist}
 Summary: Tools for managing Linux kernel connection tracking
 # src/utils.c contains GPLv2-only code from linux
 License: GPL-2.0-or-later AND GPL-2.0-only
 URL: http://conntrack-tools.netfilter.org/
-Source0: https://www.netfilter.org/projects/conntrack-tools/files/conntrack-tools-%{version}.tar.bz2
+Source0: https://www.netfilter.org/projects/conntrack-tools/files/conntrack-tools-%{version}.tar.xz
 Patch1: 0001-disable-RPC-helper.patch
 
 BuildRequires: %{_cross_os}glibc-devel
diff --git a/packages/containerd/Cargo.toml b/packages/containerd/Cargo.toml
index 39ae691c860..fc556d0e928 100644
--- a/packages/containerd/Cargo.toml
+++ b/packages/containerd/Cargo.toml
@@ -12,8 +12,8 @@ path = "../packages.rs"
 releases-url = "/~https://github.com/containerd/containerd/releases"
 
 [[package.metadata.build-package.external-files]]
-url = "/~https://github.com/containerd/containerd/archive/v1.6.28/containerd-1.6.28.tar.gz"
-sha512 = "8d7f289aa1dd55868612654e60ddb95573149b2b40ba925910a0ad75ec5de1acd916ecaaf7571f4f24ec0fb6db3ec23ef1efbe6bf4960c410f46f7b15531a301"
+url = "/~https://github.com/containerd/containerd/archive/v1.6.30/containerd-1.6.30.tar.gz"
+sha512 = "0c92412601805757c13f9007cb8a2828da557bcc0e9e4627d1d1c50e5a2f8281c9155d5976d57b51cace497f68bd014c2688b077cf4bfc77d458bdc91dae164c"
 
 # RPM BuildRequires
 [build-dependencies]
diff --git a/packages/containerd/containerd.spec b/packages/containerd/containerd.spec
index 1465f0bd22c..ebab6af21e7 100644
--- a/packages/containerd/containerd.spec
+++ b/packages/containerd/containerd.spec
@@ -2,7 +2,7 @@
 %global gorepo containerd
 %global goimport %{goproject}/%{gorepo}
 
-%global gover 1.6.28
+%global gover 1.6.30
 %global rpmver %{gover}
 %global gitrev ae07eda36dd25f8a1b98dfbf587313b99c0190bb
 
diff --git a/packages/kexec-tools/Cargo.toml b/packages/kexec-tools/Cargo.toml
index b9c90f940f8..97581924061 100644
--- a/packages/kexec-tools/Cargo.toml
+++ b/packages/kexec-tools/Cargo.toml
@@ -12,8 +12,8 @@ path = "../packages.rs"
 releases-url = "https://kernel.org/pub/linux/utils/kernel/kexec"
 
 [[package.metadata.build-package.external-files]]
-url = "https://kernel.org/pub/linux/utils/kernel/kexec/kexec-tools-2.0.27.tar.xz"
-sha512 = "30b5ef7c2075dfd11fd1c3c33abe6b60673400257668d60145be08a2472356c7191a0810095da0fa32e327b9806a7578c73129ac0550d26c28ea6571c88c7b3c"
+url = "https://kernel.org/pub/linux/utils/kernel/kexec/kexec-tools-2.0.28.tar.xz"
+sha512 = "889a7bf1d26bb309e4ff7ce1c8dbcf48c01e47221ea3acf1c4ef2a98a652c496e31bddcdb627d3adebd85f7541d1fb9122c60e741e10b3726e31a9733cadc753"
 
 [build-dependencies]
 glibc = { path = "../glibc" }
diff --git a/packages/kexec-tools/kexec-tools.spec b/packages/kexec-tools/kexec-tools.spec
index a01ca34ca6f..d3b3969338b 100644
--- a/packages/kexec-tools/kexec-tools.spec
+++ b/packages/kexec-tools/kexec-tools.spec
@@ -1,5 +1,5 @@
 Name: %{_cross_os}kexec-tools
-Version: 2.0.27
+Version: 2.0.28
 Release: 1%{?dist}
 Summary: Linux tool to load kernels from the running system
 License: GPL-2.0-or-later AND GPL-2.0-only
diff --git a/packages/kubernetes-1.23/kubernetes-1.23.spec b/packages/kubernetes-1.23/kubernetes-1.23.spec
index 21c010758cd..e75039b6201 100644
--- a/packages/kubernetes-1.23/kubernetes-1.23.spec
+++ b/packages/kubernetes-1.23/kubernetes-1.23.spec
@@ -84,6 +84,7 @@ cp third_party/forked/golang/LICENSE LICENSE.golang
 cp third_party/forked/golang/PATENTS PATENTS.golang
 
 %build
+export FORCE_HOST_GO=1
 # Build codegen programs with the host toolchain.
 make generated_files
 
diff --git a/packages/kubernetes-1.24/Cargo.toml b/packages/kubernetes-1.24/Cargo.toml
index 33438eb16f1..6700fea5dc7 100644
--- a/packages/kubernetes-1.24/Cargo.toml
+++ b/packages/kubernetes-1.24/Cargo.toml
@@ -14,8 +14,8 @@ path = "../packages.rs"
 package-name = "kubernetes-1.24"
 
 [[package.metadata.build-package.external-files]]
-url = "https://distro.eks.amazonaws.com/kubernetes-1-24/releases/29/artifacts/kubernetes/v1.24.17/kubernetes-src.tar.gz"
-sha512 = "cfdecfb3cdae51f8484eb611f3946c3ffbb708d701ee3a4723498f1164a455a1a8a9ebd61cf195cd5532edcf16e6bf3d6e554142b679f3d0c425e685e32b26da"
+url = "https://distro.eks.amazonaws.com/kubernetes-1-24/releases/36/artifacts/kubernetes/v1.24.17/kubernetes-src.tar.gz"
+sha512 = "ac71b53a37c2875a2f0ecf816aba3d3bb6da555976496f43f18e3fedfc8c60903b372a11c7f5b1114561e8d8baecb028ed92c34d8adeafe495e5b9dc7d32a4ab"
 # RPM BuildRequires
 [build-dependencies]
 glibc = { path = "../glibc" }
diff --git a/packages/kubernetes-1.24/kubernetes-1.24.spec b/packages/kubernetes-1.24/kubernetes-1.24.spec
index 71d019b7f55..7ae8db082eb 100644
--- a/packages/kubernetes-1.24/kubernetes-1.24.spec
+++ b/packages/kubernetes-1.24/kubernetes-1.24.spec
@@ -32,7 +32,7 @@ Summary: Container cluster management
 # base Apache-2.0, third_party Apache-2.0 AND BSD-3-Clause
 License: Apache-2.0 AND BSD-3-Clause
 URL: https://%{goimport}
-Source0: https://distro.eks.amazonaws.com/kubernetes-1-24/releases/29/artifacts/kubernetes/v%{gover}/kubernetes-src.tar.gz
+Source0: https://distro.eks.amazonaws.com/kubernetes-1-24/releases/36/artifacts/kubernetes/v%{gover}/kubernetes-src.tar.gz
 Source1: kubelet.service
 Source2: kubelet-env
 Source3: kubelet-config
@@ -85,6 +85,7 @@ cp third_party/forked/golang/LICENSE LICENSE.golang
 cp third_party/forked/golang/PATENTS PATENTS.golang
 
 %build
+export FORCE_HOST_GO=1
 # Build codegen programs with the host toolchain.
 make generated_files
 
diff --git a/packages/kubernetes-1.25/Cargo.toml b/packages/kubernetes-1.25/Cargo.toml
index 6b30bf30f20..3311b6647c9 100644
--- a/packages/kubernetes-1.25/Cargo.toml
+++ b/packages/kubernetes-1.25/Cargo.toml
@@ -14,8 +14,8 @@ path = "../packages.rs"
 package-name = "kubernetes-1.25"
 
 [[package.metadata.build-package.external-files]]
-url = "https://distro.eks.amazonaws.com/kubernetes-1-25/releases/27/artifacts/kubernetes/v1.25.16/kubernetes-src.tar.gz"
-sha512 = "e3a7b21e6fe07e31d42a4c8b917679b1d3d7f3d0020d5085b592fdb776228e786bbe458cce94d6cf1d7c8bd85142ba02bbfb71b89047f99f8e82a5e9f62dd477"
+url = "https://distro.eks.amazonaws.com/kubernetes-1-25/releases/35/artifacts/kubernetes/v1.25.16/kubernetes-src.tar.gz"
+sha512 = "e3672cc93d74f1ffbdbf446b84693fa8e03d989f6c9174adc60b4ea8f53ac0e5bc660d06377f99bc7cc11f40c2c611e8641f6b9c1d6d2c658b1b0ece79909b1b"
 # RPM BuildRequires
 [build-dependencies]
 glibc = { path = "../glibc" }
diff --git a/packages/kubernetes-1.25/kubernetes-1.25.spec b/packages/kubernetes-1.25/kubernetes-1.25.spec
index 3f6939147cb..de7319c4ee7 100644
--- a/packages/kubernetes-1.25/kubernetes-1.25.spec
+++ b/packages/kubernetes-1.25/kubernetes-1.25.spec
@@ -32,7 +32,7 @@ Summary: Container cluster management
 # base Apache-2.0, third_party Apache-2.0 AND BSD-3-Clause
 License: Apache-2.0 AND BSD-3-Clause
 URL: https://%{goimport}
-Source0: https://distro.eks.amazonaws.com/kubernetes-1-25/releases/27/artifacts/kubernetes/v%{gover}/kubernetes-src.tar.gz
+Source0: https://distro.eks.amazonaws.com/kubernetes-1-25/releases/35/artifacts/kubernetes/v%{gover}/kubernetes-src.tar.gz
 Source1: kubelet.service
 Source2: kubelet-env
 Source3: kubelet-config
@@ -85,6 +85,7 @@ cp third_party/forked/golang/LICENSE LICENSE.golang
 cp third_party/forked/golang/PATENTS PATENTS.golang
 
 %build
+export FORCE_HOST_GO=1
 # Build codegen programs with the host toolchain.
 make generated_files
 
diff --git a/packages/kubernetes-1.26/Cargo.toml b/packages/kubernetes-1.26/Cargo.toml
index 7d74df83ced..5060df71392 100644
--- a/packages/kubernetes-1.26/Cargo.toml
+++ b/packages/kubernetes-1.26/Cargo.toml
@@ -14,8 +14,8 @@ path = "../packages.rs"
 package-name = "kubernetes-1.26"
 
 [[package.metadata.build-package.external-files]]
-url = "https://distro.eks.amazonaws.com/kubernetes-1-26/releases/23/artifacts/kubernetes/v1.26.11/kubernetes-src.tar.gz"
-sha512 = "7790ef617fbd30a1f264a4af19d6ccd0a81a6b3abfafe75aa9584948211c1e16a0d4f8910cb9b3edfc77407932bd879215fc0084fbfc5e65b090369e05378790"
+url = "https://distro.eks.amazonaws.com/kubernetes-1-26/releases/31/artifacts/kubernetes/v1.26.14/kubernetes-src.tar.gz"
+sha512 = "6e4df683493b055e0445be2389f7c31b48da5a26f82f833df9ab9d0ae17e769cda65d58e0af2bbd4472a30b6f8ec4bd144af00b35a8ecd2b7afd9c62c2fcc7dc"
 # RPM BuildRequires
 [build-dependencies]
 glibc = { path = "../glibc" }
diff --git a/packages/kubernetes-1.26/kubernetes-1.26.spec b/packages/kubernetes-1.26/kubernetes-1.26.spec
index b58478e5c83..84536887c64 100644
--- a/packages/kubernetes-1.26/kubernetes-1.26.spec
+++ b/packages/kubernetes-1.26/kubernetes-1.26.spec
@@ -10,7 +10,7 @@
 %global gorepo kubernetes
 %global goimport %{goproject}/%{gorepo}
 
-%global gover 1.26.11
+%global gover 1.26.14
 %global rpmver %{gover}
 
 %global _dwz_low_mem_die_limit 0
@@ -32,7 +32,7 @@ Summary: Container cluster management
 # base Apache-2.0, third_party Apache-2.0 AND BSD-3-Clause
 License: Apache-2.0 AND BSD-3-Clause
 URL: https://%{goimport}
-Source0: https://distro.eks.amazonaws.com/kubernetes-1-26/releases/23/artifacts/kubernetes/v%{gover}/kubernetes-src.tar.gz
+Source0: https://distro.eks.amazonaws.com/kubernetes-1-26/releases/31/artifacts/kubernetes/v%{gover}/kubernetes-src.tar.gz
 Source1: kubelet.service
 Source2: kubelet-env
 Source3: kubelet-config
@@ -85,6 +85,7 @@ cp third_party/forked/golang/LICENSE LICENSE.golang
 cp third_party/forked/golang/PATENTS PATENTS.golang
 
 %build
+export FORCE_HOST_GO=1
 # Build codegen programs with the host toolchain.
 make hack/update-codegen.sh
 
diff --git a/packages/kubernetes-1.27/Cargo.toml b/packages/kubernetes-1.27/Cargo.toml
index 6df6d0aeeb0..e49007e0fe3 100644
--- a/packages/kubernetes-1.27/Cargo.toml
+++ b/packages/kubernetes-1.27/Cargo.toml
@@ -14,8 +14,8 @@ path = "../packages.rs"
 package-name = "kubernetes-1.27"
 
 [[package.metadata.build-package.external-files]]
-url = "https://distro.eks.amazonaws.com/kubernetes-1-27/releases/17/artifacts/kubernetes/v1.27.8/kubernetes-src.tar.gz"
-sha512 = "d09335d7d171c0a1d6e7a85dfbbfedd6732c89f56c617f4c54555429339ab3ce2a6008e8a0583b71d26cf46df3ebd8bf9b46344f4b1f7d43d6ec381b37f300cf"
+url = "https://distro.eks.amazonaws.com/kubernetes-1-27/releases/25/artifacts/kubernetes/v1.27.11/kubernetes-src.tar.gz"
+sha512 = "6d07dabc536149035137332afaa641964d76839d63b0d1b8fe8fbce39c7879370996eece1df0c6d1deb478bb613033527c06934bb6ccfd23cbb18a0ae3d85e0d"
 
 # RPM BuildRequires
 [build-dependencies]
diff --git a/packages/kubernetes-1.27/kubernetes-1.27.spec b/packages/kubernetes-1.27/kubernetes-1.27.spec
index 4c1adff5736..f7061661b2f 100644
--- a/packages/kubernetes-1.27/kubernetes-1.27.spec
+++ b/packages/kubernetes-1.27/kubernetes-1.27.spec
@@ -10,7 +10,7 @@
 %global gorepo kubernetes
 %global goimport %{goproject}/%{gorepo}
 
-%global gover 1.27.8
+%global gover 1.27.11
 %global rpmver %{gover}
 
 %global _dwz_low_mem_die_limit 0
@@ -32,7 +32,7 @@ Summary: Container cluster management
 # base Apache-2.0, third_party Apache-2.0 AND BSD-3-Clause
 License: Apache-2.0 AND BSD-3-Clause
 URL: https://%{goimport}
-Source0: https://distro.eks.amazonaws.com/kubernetes-1-27/releases/17/artifacts/kubernetes/v%{gover}/kubernetes-src.tar.gz
+Source0: https://distro.eks.amazonaws.com/kubernetes-1-27/releases/25/artifacts/kubernetes/v%{gover}/kubernetes-src.tar.gz
 Source1: kubelet.service
 Source2: kubelet-env
 Source3: kubelet-config
@@ -85,6 +85,7 @@ cp third_party/forked/golang/LICENSE LICENSE.golang
 cp third_party/forked/golang/PATENTS PATENTS.golang
 
 %build
+export FORCE_HOST_GO=1
 # Build codegen programs with the host toolchain.
 make hack/update-codegen.sh
 
diff --git a/packages/kubernetes-1.28/Cargo.toml b/packages/kubernetes-1.28/Cargo.toml
index d50ac54d70e..8cb8816f28f 100644
--- a/packages/kubernetes-1.28/Cargo.toml
+++ b/packages/kubernetes-1.28/Cargo.toml
@@ -14,8 +14,8 @@ path = "../packages.rs"
 package-name = "kubernetes-1.28"
 
 [[package.metadata.build-package.external-files]]
-url = "https://distro.eks.amazonaws.com/kubernetes-1-28/releases/10/artifacts/kubernetes/v1.28.4/kubernetes-src.tar.gz"
-sha512 = "663762465cf0a926651b4996f59fa20d31cc0dc2a0d7b8aeb6cd7ad465b154fc330a5b51e92c1a5d6ae80af2cb3789e8b99b68524a4c58d03d298c6ff4e29b32"
+url = "https://distro.eks.amazonaws.com/kubernetes-1-28/releases/18/artifacts/kubernetes/v1.28.7/kubernetes-src.tar.gz"
+sha512 = "451e88936d88e07edfd3bd14069a5c33d7c1b21a10feae693f09206ced76170f228f4a12fe666220ddfa39192ca080b7a59b6942d02fdd326759ae24163a483e"
 
 # RPM BuildRequires
 [build-dependencies]
diff --git a/packages/kubernetes-1.28/kubernetes-1.28.spec b/packages/kubernetes-1.28/kubernetes-1.28.spec
index 52761fbf98a..c8a49a30059 100644
--- a/packages/kubernetes-1.28/kubernetes-1.28.spec
+++ b/packages/kubernetes-1.28/kubernetes-1.28.spec
@@ -10,7 +10,7 @@
 %global gorepo kubernetes
 %global goimport %{goproject}/%{gorepo}
 
-%global gover 1.28.4
+%global gover 1.28.7
 %global rpmver %{gover}
 
 %global _dwz_low_mem_die_limit 0
@@ -32,7 +32,7 @@ Summary: Container cluster management
 # base Apache-2.0, third_party Apache-2.0 AND BSD-3-Clause
 License: Apache-2.0 AND BSD-3-Clause
 URL: https://%{goimport}
-Source0: https://distro.eks.amazonaws.com/kubernetes-1-28/releases/10/artifacts/kubernetes/v%{gover}/kubernetes-src.tar.gz
+Source0: https://distro.eks.amazonaws.com/kubernetes-1-28/releases/18/artifacts/kubernetes/v%{gover}/kubernetes-src.tar.gz
 Source1: kubelet.service
 Source2: kubelet-env
 Source3: kubelet-config
@@ -85,6 +85,7 @@ cp third_party/forked/golang/LICENSE LICENSE.golang
 cp third_party/forked/golang/PATENTS PATENTS.golang
 
 %build
+export FORCE_HOST_GO=1
 # Build codegen programs with the host toolchain.
 make hack/update-codegen.sh
 
diff --git a/packages/kubernetes-1.29/Cargo.toml b/packages/kubernetes-1.29/Cargo.toml
index dc96fbe4a77..a27508ce49d 100644
--- a/packages/kubernetes-1.29/Cargo.toml
+++ b/packages/kubernetes-1.29/Cargo.toml
@@ -14,8 +14,8 @@ path = "../packages.rs"
 package-name = "kubernetes-1.29"
 
 [[package.metadata.build-package.external-files]]
-url = "https://distro.eks.amazonaws.com/kubernetes-1-29/releases/1/artifacts/kubernetes/v1.29.0/kubernetes-src.tar.gz"
-sha512 = "fb94f967683428ca59dd8f203f398b2658ef5b65d517672d16e7f5b4e08662f9ee81065840060301e240f7659ec61543402ad4d0379c5405047c612ede8ad4eb"
+url = "https://distro.eks.amazonaws.com/kubernetes-1-29/releases/7/artifacts/kubernetes/v1.29.1/kubernetes-src.tar.gz"
+sha512 = "9940027197f83702516775047664d3c30a83e69202dcca5aa89f320e78c27a930eb1373777277f240b3c5a63c351ccab3199c577424e760fe122692065895e2f"
 
 # RPM BuildRequires
 [build-dependencies]
diff --git a/packages/kubernetes-1.29/kubernetes-1.29.spec b/packages/kubernetes-1.29/kubernetes-1.29.spec
index cc8a6b93505..9149941888d 100644
--- a/packages/kubernetes-1.29/kubernetes-1.29.spec
+++ b/packages/kubernetes-1.29/kubernetes-1.29.spec
@@ -10,7 +10,7 @@
 %global gorepo kubernetes
 %global goimport %{goproject}/%{gorepo}
 
-%global gover 1.29.0
+%global gover 1.29.1
 %global rpmver %{gover}
 
 %global _dwz_low_mem_die_limit 0
@@ -32,7 +32,7 @@ Summary: Container cluster management
 # base Apache-2.0, third_party Apache-2.0 AND BSD-3-Clause
 License: Apache-2.0 AND BSD-3-Clause
 URL: https://%{goimport}
-Source0: https://distro.eks.amazonaws.com/kubernetes-1-29/releases/1/artifacts/kubernetes/v%{gover}/kubernetes-src.tar.gz
+Source0: https://distro.eks.amazonaws.com/kubernetes-1-29/releases/7/artifacts/kubernetes/v%{gover}/kubernetes-src.tar.gz
 Source1: kubelet.service
 Source2: kubelet-env
 Source3: kubelet-config
@@ -85,6 +85,7 @@ cp third_party/forked/golang/LICENSE LICENSE.golang
 cp third_party/forked/golang/PATENTS PATENTS.golang
 
 %build
+export FORCE_HOST_GO=1
 # Build codegen programs with the host toolchain.
 make hack/update-codegen.sh
 
diff --git a/packages/libaudit/Cargo.toml b/packages/libaudit/Cargo.toml
index 40e5b196de5..9c0d11344f9 100644
--- a/packages/libaudit/Cargo.toml
+++ b/packages/libaudit/Cargo.toml
@@ -12,8 +12,8 @@ path = "../packages.rs"
 releases-url = "/~https://github.com/linux-audit/audit-userspace/releases"
 
 [[package.metadata.build-package.external-files]]
-url = "/~https://github.com/linux-audit/audit-userspace/archive/v3.1.2/audit-userspace-3.1.2.tar.gz"
-sha512 = "d5b05686aedd6eaaced000778580bd3e96e38c020534038d6b1ee6de96dd7687c2f3a52a2ae75be8b93c173b286a56dbc92231906c68fda79b113dfcaad6da84"
+url = "/~https://github.com/linux-audit/audit-userspace/archive/v3.1.3/audit-userspace-3.1.3.tar.gz"
+sha512 = "3e21af2a43e103dd38b65bb1fbfcbe5da2aae1a883218edd80dc715d4ed5fc8980b964469dadf42040f35fab9bfb4b0224b299aafb622a11f48e9f388103b6f0"
 
 [build-dependencies]
 glibc = { path = "../glibc" }
diff --git a/packages/libaudit/libaudit.spec b/packages/libaudit/libaudit.spec
index 689d4fc3ade..b02fcc3b471 100644
--- a/packages/libaudit/libaudit.spec
+++ b/packages/libaudit/libaudit.spec
@@ -1,5 +1,5 @@
 Name: %{_cross_os}libaudit
-Version: 3.1.2
+Version: 3.1.3
 Release: 1%{?dist}
 Summary: Library for the audit subsystem
 License: GPL-2.0-or-later AND LGPL-2.1-or-later
diff --git a/packages/libexpat/Cargo.toml b/packages/libexpat/Cargo.toml
index 16143b1001e..918c4f04629 100644
--- a/packages/libexpat/Cargo.toml
+++ b/packages/libexpat/Cargo.toml
@@ -12,8 +12,8 @@ path = "../packages.rs"
 releases-url = "/~https://github.com/libexpat/libexpat/releases/"
 
 [[package.metadata.build-package.external-files]]
-url = "/~https://github.com/libexpat/libexpat/releases/download/R_2_6_0/expat-2.6.0.tar.xz"
-sha512 = "d6f1c4a1a2ec8ffc04c04d6767cc8dd7dea3d132d10b8a2c45c5bfb405893c75db032b87a56cc88300b61c961dd7f9782b93aa74dddc7e66f25acb0c6c82b1fd"
+url = "/~https://github.com/libexpat/libexpat/releases/download/R_2_6_2/expat-2.6.2.tar.xz"
+sha512 = "47b60967d6346d330dded87ea1a2957aa7d34dd825043386a89aa131054714f618ede57bfe97cf6caa40582a4bc67e198d2a915e7d8dbe8ee4f581857c2e3c2e"
 
 [build-dependencies]
 glibc = { path = "../glibc" }
diff --git a/packages/libexpat/libexpat.spec b/packages/libexpat/libexpat.spec
index c1a27ba14eb..024ffa66cf6 100644
--- a/packages/libexpat/libexpat.spec
+++ b/packages/libexpat/libexpat.spec
@@ -1,4 +1,4 @@
-%global unversion 2_6_0
+%global unversion 2_6_2
 
 Name: %{_cross_os}libexpat
 Version: %(echo %{unversion} | sed 's/_/./g')
diff --git a/packages/libglib/Cargo.toml b/packages/libglib/Cargo.toml
index 13466b4eed5..ba130a90613 100644
--- a/packages/libglib/Cargo.toml
+++ b/packages/libglib/Cargo.toml
@@ -12,8 +12,8 @@ path = "../packages.rs"
 releases-url = "https://download.gnome.org/sources/glib"
 
 [[package.metadata.build-package.external-files]]
-url = "https://download.gnome.org/sources/glib/2.78/glib-2.78.2.tar.xz"
-sha512 = "d09d25977c2121e68e6215c29d672330b88b4d11e1c34b81b658225ae3e63226c64ce91d3093b9718bef62be0d549b3e46f0177560fb0585c5bfb21de45d1c83"
+url = "https://download.gnome.org/sources/glib/2.78/glib-2.78.4.tar.xz"
+sha512 = "6f3a06e10e7373a2dbf0688512de4126472fb73cbec488b7983b5ffecff09c64d7e1ca462f892e8f215d3d277d103ca802bad7ef0bd0f91edf26fc6ce67187b6"
 
 [build-dependencies]
 glibc = { path = "../glibc" }
diff --git a/packages/libglib/libglib.spec b/packages/libglib/libglib.spec
index 4b795b5c8e1..2ef4c0614fd 100644
--- a/packages/libglib/libglib.spec
+++ b/packages/libglib/libglib.spec
@@ -1,5 +1,5 @@
 Name: %{_cross_os}libglib
-Version: 2.78.2
+Version: 2.78.4
 Release: 1%{?dist}
 Summary: The GLib libraries
 # glib2 is LGPL-2.1-only
diff --git a/packages/libselinux/Cargo.toml b/packages/libselinux/Cargo.toml
index 86f6e50024e..2d160d7ce80 100644
--- a/packages/libselinux/Cargo.toml
+++ b/packages/libselinux/Cargo.toml
@@ -12,8 +12,8 @@ path = "../packages.rs"
 releases-url = "/~https://github.com/SELinuxProject/selinux/releases/"
 
 [[package.metadata.build-package.external-files]]
-url = "/~https://github.com/SELinuxProject/selinux/releases/download/3.5/libselinux-3.5.tar.gz"
-sha512 = "4e13261a5821018a5f3cdce676f180bb62e5bc225981ca8a498ece0d1c88d9ba8eaa0ce4099dd0849309a8a7c5a9a0953df841a9922f2c284e5a109e5d937ba7"
+url = "/~https://github.com/SELinuxProject/selinux/releases/download/3.6/libselinux-3.6.tar.gz"
+sha512 = "182dcdf3510083ff4b9376a4a6d6a7b33905ac3c5e974c188bf3965686c54b663162c543ecf15eab75102f3c91a2502d33d0f1104dec01dd9b14737ef3f2b544"
 
 [build-dependencies]
 glibc = { path = "../glibc" }
diff --git a/packages/libselinux/libselinux.spec b/packages/libselinux/libselinux.spec
index fc540e2c62a..0b899be19f0 100644
--- a/packages/libselinux/libselinux.spec
+++ b/packages/libselinux/libselinux.spec
@@ -1,5 +1,5 @@
 Name: %{_cross_os}libselinux
-Version: 3.5
+Version: 3.6
 Release: 1%{?dist}
 Summary: Library for SELinux
 License: LicenseRef-SELinux-PD
@@ -70,6 +70,7 @@ export USE_PCRE2='y' \\\
 %exclude %{_cross_sbindir}/getenforce
 %exclude %{_cross_sbindir}/getfilecon
 %exclude %{_cross_sbindir}/getpidcon
+%exclude %{_cross_sbindir}/getpolicyload
 %exclude %{_cross_sbindir}/getsebool
 %exclude %{_cross_sbindir}/getseuser
 %exclude %{_cross_sbindir}/matchpathcon
diff --git a/packages/libsemanage/Cargo.toml b/packages/libsemanage/Cargo.toml
index 0f47ae878d9..3b6761661c0 100644
--- a/packages/libsemanage/Cargo.toml
+++ b/packages/libsemanage/Cargo.toml
@@ -12,8 +12,8 @@ path = "../packages.rs"
 releases-url = "/~https://github.com/SELinuxProject/selinux/releases/"
 
 [[package.metadata.build-package.external-files]]
-url = "/~https://github.com/SELinuxProject/selinux/releases/download/3.5/libsemanage-3.5.tar.gz"
-sha512 = "959fbd0d6bc6849da6caa13dc41c3f8818cbbd29f04b5d2ac7246c4b395b4f370f113a04cc9cfcb52be2afebfa636013ac4ad4011384c58c7ce066a45cae2751"
+url = "/~https://github.com/SELinuxProject/selinux/releases/download/3.6/libsemanage-3.6.tar.gz"
+sha512 = "8998b6a1b254a9673b99ae4d70a1edc769bb728a44f573cdf62e0a9c9392b77644ee2d70e1936a2f8a9a7f8b063ce98a981f4b8b7060f5b82791889330d69364"
 
 [build-dependencies]
 glibc = { path = "../glibc" }
diff --git a/packages/libsemanage/libsemanage.spec b/packages/libsemanage/libsemanage.spec
index 5ab19876db4..329bc98bfff 100644
--- a/packages/libsemanage/libsemanage.spec
+++ b/packages/libsemanage/libsemanage.spec
@@ -1,5 +1,5 @@
 Name: %{_cross_os}libsemanage
-Version: 3.5
+Version: 3.6
 Release: 1%{?dist}
 Summary: Library for SELinux binary policy manipulation
 License: LGPL-2.1-or-later
diff --git a/packages/libsepol/Cargo.toml b/packages/libsepol/Cargo.toml
index 02cda473166..62851de4983 100644
--- a/packages/libsepol/Cargo.toml
+++ b/packages/libsepol/Cargo.toml
@@ -12,8 +12,8 @@ path = "../packages.rs"
 releases-url = "/~https://github.com/SELinuxProject/selinux/releases/"
 
 [[package.metadata.build-package.external-files]]
-url = "/~https://github.com/SELinuxProject/selinux/releases/download/3.5/libsepol-3.5.tar.gz"
-sha512 = "66f45a9f4951589855961955db686b006b4c0cddead6ac49ad238a0e4a34775905bd10fb8cf0c0ff2ab64f9b7d8366b97fcd5b19c382dec39971a2835cc765c8"
+url = "/~https://github.com/SELinuxProject/selinux/releases/download/3.6/libsepol-3.6.tar.gz"
+sha512 = "35a42d2749fc4f71bc6b7488380714f56975564007128566f1c73e5c50bf81c17535b2cfda4583aacb4870aa2cd5885321c01523e415bda8b3326bfefb13d58e"
 
 [build-dependencies]
 glibc = { path = "../glibc" }
diff --git a/packages/libsepol/libsepol.spec b/packages/libsepol/libsepol.spec
index 1765cf3149d..f293fab4cdc 100644
--- a/packages/libsepol/libsepol.spec
+++ b/packages/libsepol/libsepol.spec
@@ -1,5 +1,5 @@
 Name: %{_cross_os}libsepol
-Version: 3.5
+Version: 3.6
 Release: 1%{?dist}
 Summary: Library for SELinux policy manipulation
 License: LGPL-2.1-or-later
diff --git a/packages/policycoreutils/Cargo.toml b/packages/policycoreutils/Cargo.toml
index cad849b461f..733c33c0c2e 100644
--- a/packages/policycoreutils/Cargo.toml
+++ b/packages/policycoreutils/Cargo.toml
@@ -12,8 +12,8 @@ path = "../packages.rs"
 releases-url = "/~https://github.com/SELinuxProject/selinux/releases/"
 
 [[package.metadata.build-package.external-files]]
-url = "/~https://github.com/SELinuxProject/selinux/releases/download/3.5/policycoreutils-3.5.tar.gz"
-sha512 = "7978ef6b7a278c6384c9b397734d03c4932c8aefecceaa1e6a1345be27b253dbe276fdcd219ce83ad732c6ed55d53bbc3254e39bccadd67d2cd1152a14749444"
+url = "/~https://github.com/SELinuxProject/selinux/releases/download/3.6/policycoreutils-3.6.tar.gz"
+sha512 = "e1f32e6e0310b879a5aadab157b103314a61bf3b8fd59c1212d701fbf39900e3b9a0b727338988103d784a7e505355a871ba519dd91520b135a3b9dae40bf1b0"
 
 [build-dependencies]
 glibc = { path = "../glibc" }
diff --git a/packages/policycoreutils/policycoreutils.spec b/packages/policycoreutils/policycoreutils.spec
index 47e5f81ef52..ebc27833c08 100644
--- a/packages/policycoreutils/policycoreutils.spec
+++ b/packages/policycoreutils/policycoreutils.spec
@@ -1,5 +1,5 @@
 Name: %{_cross_os}policycoreutils
-Version: 3.5
+Version: 3.6
 Release: 1%{?dist}
 Summary: A set of SELinux policy tools
 License: GPL-2.0-only
diff --git a/packages/xfsprogs/0001-libxfs-do-not-try-to-run-the-crc32selftest.patch b/packages/xfsprogs/0001-libxfs-do-not-try-to-run-the-crc32selftest.patch
deleted file mode 100644
index 9418d7edd5d..00000000000
--- a/packages/xfsprogs/0001-libxfs-do-not-try-to-run-the-crc32selftest.patch
+++ /dev/null
@@ -1,44 +0,0 @@
-From 3a77dfc54271059dcac305384bf6ace34fe1f3d3 Mon Sep 17 00:00:00 2001
-From: "Yann E. MORIN" <yann.morin.1998@free.fr>
-Date: Sun, 18 Dec 2016 15:37:27 +0100
-Subject: [PATCH] libxfs: do not try to run the crc32selftest
-
-Even though the crc32selftest is natively compiled (because it is to be
-executed), it fails in cross-compilation as the host may lack the
-required headers, like uuid/uuid.h (e.g. in a minimal environment).
-
-Moreover, running the crc32selftest natively is completely wrong,
-because it passing on the host does not mean it would still pass n the
-target (because endianness or bitness or alignment differences).
-
-So, just disable running the crc32selftest altogether.
-
-Note that there's a remaining bug-in-hiding, because the crc32 table
-generator is natively built, but with the target CFLAGS.
-
-Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
-Signed-off-by: "Fabrice Fontaine" <fontaine.fabrice@gmail.com>
-[Update for 4.18.0: crc32 has been moved from libxfs to libfrog]
----
- libfrog/Makefile | 4 ++--
- 1 file changed, 2 insertions(+), 2 deletions(-)
-
-diff --git a/libfrog/Makefile b/libfrog/Makefile
-index 0110708..675c1cb 100644
---- a/libfrog/Makefile
-+++ b/libfrog/Makefile
-@@ -54,9 +54,9 @@ ifeq ($(HAVE_GETMNTENT),yes)
- LCFLAGS += -DHAVE_GETMNTENT
- endif
- 
--LDIRT = gen_crc32table crc32table.h crc32selftest
-+LDIRT = gen_crc32table crc32table.h
- 
--default: crc32selftest ltdepend $(LTLIBRARY)
-+default: ltdepend $(LTLIBRARY)
- 
- crc32table.h: gen_crc32table.c crc32defs.h
- 	@echo "    [CC]     gen_crc32table"
--- 
-2.40.1
-
diff --git a/packages/xfsprogs/Cargo.toml b/packages/xfsprogs/Cargo.toml
index d2e30a34443..16d83fc20fa 100644
--- a/packages/xfsprogs/Cargo.toml
+++ b/packages/xfsprogs/Cargo.toml
@@ -12,8 +12,8 @@ path = "../packages.rs"
 releases-url = "https://mirrors.edge.kernel.org/pub/linux/utils/fs/xfs/xfsprogs/"
 
 [[package.metadata.build-package.external-files]]
-url = "http://kernel.org/pub/linux/utils/fs/xfs/xfsprogs/xfsprogs-6.4.0.tar.xz"
-sha512 = "831e7747640bc2964b182226d8bb6f637610b123aeec9b3cb97a5de5d5b65bde30c6b40ad2e78de6a5214e823dd75de3a2bdfddd8ab1638f5c7340a760c91b3f"
+url = "http://kernel.org/pub/linux/utils/fs/xfs/xfsprogs/xfsprogs-6.6.0.tar.xz"
+sha512 = "89b4436a958075ac77cc2b5b5f0618164d47f7d6fbc2271a7927c886fba7bf67284e1825c1ecc259969235222b4d084a40c354edb6d83c21029d737108aa38da"
 
 [build-dependencies]
 glibc = { path = "../glibc" }
diff --git a/packages/xfsprogs/xfsprogs.spec b/packages/xfsprogs/xfsprogs.spec
index 5c3d8a61379..13cc457c8d9 100644
--- a/packages/xfsprogs/xfsprogs.spec
+++ b/packages/xfsprogs/xfsprogs.spec
@@ -1,11 +1,10 @@
 Name: %{_cross_os}xfsprogs
-Version: 6.4.0
+Version: 6.6.0
 Release: 1%{?dist}
 Summary: Utilities for managing the XFS filesystem
 License: GPL-2.0-only AND LGPL-2.1-only
 URL: https://xfs.wiki.kernel.org
 Source0: http://kernel.org/pub/linux/utils/fs/xfs/xfsprogs/xfsprogs-%{version}.tar.xz
-Patch1: 0001-libxfs-do-not-try-to-run-the-crc32selftest.patch
 
 BuildRequires: %{_cross_os}glibc-devel
 BuildRequires: %{_cross_os}libuuid-devel
@@ -27,7 +26,7 @@ Requires: %{name}
 %{summary}.
 
 %prep
-%autosetup -n xfsprogs-%{version} -p1
+%autosetup -n xfsprogs-%{version}
 
 %build
 %cross_configure \