diff --git a/build/fietsje/deps_kubernetes.go b/build/fietsje/deps_kubernetes.go
index c6e24d1..bed7c81 100644
--- a/build/fietsje/deps_kubernetes.go
+++ b/build/fietsje/deps_kubernetes.go
@@ -19,7 +19,7 @@
 func depsKubernetes(p *planner) {
 	// containerd and its deps
 	p.collect(
-		"k8s.io/kubernetes", "v1.19.0-rc.0",
+		"k8s.io/kubernetes", "v1.19.7",
 		buildTags("providerless"),
 		disabledProtoBuild,
 		patches(
@@ -27,6 +27,7 @@
 			"k8s-kubernetes-build.patch",
 			"k8s-native-metrics.patch",
 			"k8s-use-native.patch",
+			"k8s-revert-seccomp-runtime-default.patch",
 		),
 		prePatches(
 			"k8s-e2e-tests-providerless.patch",
@@ -156,6 +157,7 @@
 		"go.uber.org/atomic",
 		"go.uber.org/multierr",
 		"go.uber.org/zap",
+		"golang.org/x/net",
 		"golang.org/x/xerrors",
 		"gonum.org/v1/gonum",
 		"gopkg.in/fsnotify.v1",
@@ -167,7 +169,7 @@
 		"k8s.io/kube-openapi",
 		"sigs.k8s.io/apiserver-network-proxy/konnectivity-client",
 		"sigs.k8s.io/kustomize",
-		"sigs.k8s.io/structured-merge-diff/v3",
+		"sigs.k8s.io/structured-merge-diff/v4",
 		"vbom.ml/util",
 	).use(
 		"github.com/google/cadvisor",
diff --git a/build/fietsje/main.go b/build/fietsje/main.go
index 247379a..6bd1e49 100644
--- a/build/fietsje/main.go
+++ b/build/fietsje/main.go
@@ -58,7 +58,6 @@
 	p.collect(
 		"google.golang.org/grpc", "v1.29.1",
 	).use(
-		"golang.org/x/net",
 		"golang.org/x/text",
 	)
 
diff --git a/build/print-workspace-status.sh b/build/print-workspace-status.sh
index 57138a4..291c8e8 100755
--- a/build/print-workspace-status.sh
+++ b/build/print-workspace-status.sh
@@ -16,7 +16,7 @@
 # TODO(q3k): unify with //third_party/go/repsitories.bzl.
 KUBERNETES_gitMajor="1"
 KUBERNETES_gitMinor="19"
-KUBERNETES_gitVersion="v1.19.0-rc.0+nxt"
+KUBERNETES_gitVersion="v1.19.7+mngn"
 
 cat <<EOF
 KUBERNETES_gitCommit $(git rev-parse "HEAD^{commit}")