diff --git a/third_party/sandboxroot/BUILD.bazel b/third_party/sandboxroot/BUILD.bazel
index b458d9d..9162616 100644
--- a/third_party/sandboxroot/BUILD.bazel
+++ b/third_party/sandboxroot/BUILD.bazel
@@ -14,13 +14,13 @@
         "@alternatives-0__1.27-1.fc40.x86_64//rpm",
         "@ansible-srpm-macros-0__1-16.fc40.x86_64//rpm",
         "@audit-libs-0__4.0.2-1.fc40.x86_64//rpm",
-        "@authselect-0__1.5.0-5.fc40.x86_64//rpm",
-        "@authselect-libs-0__1.5.0-5.fc40.x86_64//rpm",
+        "@authselect-0__1.5.0-6.fc40.x86_64//rpm",
+        "@authselect-libs-0__1.5.0-6.fc40.x86_64//rpm",
         "@basesystem-0__11-20.fc40.x86_64//rpm",
         "@bash-0__5.2.26-3.fc40.x86_64//rpm",
         "@bc-0__1.07.1-21.fc40.x86_64//rpm",
-        "@binutils-0__2.41-37.fc40.x86_64//rpm",
-        "@binutils-gold-0__2.41-37.fc40.x86_64//rpm",
+        "@binutils-0__2.41-38.fc40.x86_64//rpm",
+        "@binutils-gold-0__2.41-38.fc40.x86_64//rpm",
         "@bison-0__3.8.2-7.fc40.x86_64//rpm",
         "@bzip2-libs-0__1.0.8-18.fc40.x86_64//rpm",
         "@ca-certificates-0__2024.2.69_v8.0.401-1.0.fc40.x86_64//rpm",
@@ -29,33 +29,33 @@
         "@clang-0__18.1.8-1.fc40.x86_64//rpm",
         "@clang-libs-0__18.1.8-1.fc40.x86_64//rpm",
         "@clang-resource-filesystem-0__18.1.8-1.fc40.x86_64//rpm",
-        "@cmake-filesystem-0__3.28.2-1.fc40.x86_64//rpm",
-        "@coreutils-single-0__9.4-8.fc40.x86_64//rpm",
+        "@cmake-filesystem-0__3.30.5-1.fc40.x86_64//rpm",
+        "@coreutils-single-0__9.4-9.fc40.x86_64//rpm",
         "@cpp-0__14.2.1-3.fc40.x86_64//rpm",
         "@cracklib-0__2.9.11-5.fc40.x86_64//rpm",
-        "@crypto-policies-0__20240725-1.git28d3e2d.fc40.x86_64//rpm",
+        "@crypto-policies-0__20241011-1.git5930b9a.fc40.x86_64//rpm",
         "@curl-0__8.6.0-10.fc40.x86_64//rpm",
         "@cyrus-sasl-lib-0__2.1.28-19.fc40.x86_64//rpm",
-        "@daxctl-libs-0__79-1.fc40.x86_64//rpm",
+        "@daxctl-libs-0__80-1.fc40.x86_64//rpm",
         "@dbus-1__1.14.10-3.fc40.x86_64//rpm",
         "@dbus-broker-0__36-2.fc40.x86_64//rpm",
         "@dbus-common-1__1.14.10-3.fc40.x86_64//rpm",
         "@diffutils-0__3.10-5.fc40.x86_64//rpm",
-        "@dwz-0__0.15-6.fc40.x86_64//rpm",
+        "@dwz-0__0.15-8.fc40.x86_64//rpm",
         "@e2fsprogs-libs-0__1.47.0-5.fc40.x86_64//rpm",
         "@ed-0__1.20.2-1.fc40.x86_64//rpm",
-        "@edk2-ovmf-0__20240813-1.fc40.x86_64//rpm",
+        "@edk2-ovmf-0__20241117-5.fc40.x86_64//rpm",
         "@efi-srpm-macros-0__5-11.fc40.x86_64//rpm",
-        "@elfutils-debuginfod-client-0__0.191-4.fc40.x86_64//rpm",
-        "@elfutils-default-yama-scope-0__0.191-4.fc40.x86_64//rpm",
-        "@elfutils-libelf-0__0.191-4.fc40.x86_64//rpm",
-        "@elfutils-libelf-devel-0__0.191-4.fc40.x86_64//rpm",
-        "@elfutils-libs-0__0.191-4.fc40.x86_64//rpm",
+        "@elfutils-debuginfod-client-0__0.192-7.fc40.x86_64//rpm",
+        "@elfutils-default-yama-scope-0__0.192-7.fc40.x86_64//rpm",
+        "@elfutils-libelf-0__0.192-7.fc40.x86_64//rpm",
+        "@elfutils-libelf-devel-0__0.192-7.fc40.x86_64//rpm",
+        "@elfutils-libs-0__0.192-7.fc40.x86_64//rpm",
         "@expat-0__2.6.3-1.fc40.x86_64//rpm",
         "@fedora-gpg-keys-0__40-2.x86_64//rpm",
-        "@fedora-release-common-0__40-39.x86_64//rpm",
-        "@fedora-release-container-0__40-39.x86_64//rpm",
-        "@fedora-release-identity-container-0__40-39.x86_64//rpm",
+        "@fedora-release-common-0__40-40.x86_64//rpm",
+        "@fedora-release-container-0__40-40.x86_64//rpm",
+        "@fedora-release-identity-container-0__40-40.x86_64//rpm",
         "@fedora-repos-0__40-2.x86_64//rpm",
         "@file-0__5.45-4.fc40.x86_64//rpm",
         "@file-libs-0__5.45-4.fc40.x86_64//rpm",
@@ -63,7 +63,7 @@
         "@findutils-1__4.9.0-9.fc40.x86_64//rpm",
         "@flex-0__2.6.4-16.fc40.x86_64//rpm",
         "@fonts-srpm-macros-1__2.0.5-14.fc40.x86_64//rpm",
-        "@forge-srpm-macros-0__0.3.2-1.fc40.x86_64//rpm",
+        "@forge-srpm-macros-0__0.4.0-1.fc40.x86_64//rpm",
         "@fpc-srpm-macros-0__1.3-12.fc40.x86_64//rpm",
         "@fuse3-libs-0__3.16.2-3.fc40.x86_64//rpm",
         "@gawk-0__5.3.0-3.fc40.x86_64//rpm",
@@ -74,12 +74,11 @@
         "@gdbm-libs-1__1.23-6.fc40.x86_64//rpm",
         "@ghc-srpm-macros-0__1.9.1-1.fc40.x86_64//rpm",
         "@glib2-0__2.80.3-1.fc40.x86_64//rpm",
-        "@glibc-0__2.39-22.fc40.x86_64//rpm",
-        "@glibc-common-0__2.39-22.fc40.x86_64//rpm",
-        "@glibc-devel-0__2.39-22.fc40.x86_64//rpm",
-        "@glibc-headers-x86-0__2.39-22.fc40.x86_64//rpm",
-        "@glibc-langpack-en-0__2.39-22.fc40.x86_64//rpm",
-        "@glibc-static-0__2.39-22.fc40.x86_64//rpm",
+        "@glibc-0__2.39-33.fc40.x86_64//rpm",
+        "@glibc-common-0__2.39-33.fc40.x86_64//rpm",
+        "@glibc-devel-0__2.39-33.fc40.x86_64//rpm",
+        "@glibc-langpack-en-0__2.39-33.fc40.x86_64//rpm",
+        "@glibc-static-0__2.39-33.fc40.x86_64//rpm",
         "@gmp-1__6.2.1-8.fc40.x86_64//rpm",
         "@gnat-srpm-macros-0__6-5.fc40.x86_64//rpm",
         "@gnupg2-0__2.4.4-1.fc40.x86_64//rpm",
@@ -92,11 +91,11 @@
         "@ipxe-roms-qemu-0__20240119-1.gitde8a0821.fc40.x86_64//rpm",
         "@jansson-0__2.13.1-9.fc40.x86_64//rpm",
         "@json-c-0__0.17-3.fc40.x86_64//rpm",
-        "@kernel-headers-0__6.11.3-200.fc40.x86_64//rpm",
+        "@kernel-headers-0__6.12.4-100.fc40.x86_64//rpm",
         "@kernel-srpm-macros-0__1.0-23.fc40.x86_64//rpm",
         "@keyutils-libs-0__1.6.3-3.fc40.x86_64//rpm",
         "@kmod-libs-0__31-5.fc40.x86_64//rpm",
-        "@krb5-libs-0__1.21.3-1.fc40.x86_64//rpm",
+        "@krb5-libs-0__1.21.3-2.fc40.x86_64//rpm",
         "@libacl-0__2.3.2-1.fc40.x86_64//rpm",
         "@libaio-0__0.3.111-19.fc40.x86_64//rpm",
         "@libarchive-0__3.7.2-7.fc40.x86_64//rpm",
@@ -112,7 +111,7 @@
         "@libcurl-0__8.6.0-10.fc40.x86_64//rpm",
         "@libdb-0__5.3.28-62.fc40.x86_64//rpm",
         "@libeconf-0__0.6.2-2.fc40.x86_64//rpm",
-        "@libedit-0__3.1-53.20240808cvs.fc40.x86_64//rpm",
+        "@libedit-0__3.1-54.20250104cvs.fc40.x86_64//rpm",
         "@libevent-0__2.1.12-12.fc40.x86_64//rpm",
         "@libfdisk-0__2.40.2-1.fc40.x86_64//rpm",
         "@libfdt-0__1.7.0-7.fc40.x86_64//rpm",
@@ -128,7 +127,7 @@
         "@libmount-0__2.40.2-1.fc40.x86_64//rpm",
         "@libmpc-0__1.3.1-5.fc40.x86_64//rpm",
         "@libnghttp2-0__1.59.0-3.fc40.x86_64//rpm",
-        "@libnl3-0__3.10.0-1.fc40.x86_64//rpm",
+        "@libnl3-0__3.11.0-1.fc40.x86_64//rpm",
         "@libnsl2-0__2.0.1-1.fc40.x86_64//rpm",
         "@libpkgconf-0__2.1.1-2.fc40.x86_64//rpm",
         "@libpmem-0__2.0.1-3.fc40.x86_64//rpm",
@@ -149,7 +148,7 @@
         "@libstdc__plus____plus__-devel-0__14.2.1-3.fc40.x86_64//rpm",
         "@libstdc__plus____plus__-static-0__14.2.1-3.fc40.x86_64//rpm",
         "@libtasn1-0__4.19.0-6.fc40.x86_64//rpm",
-        "@libtirpc-0__1.3.5-0.fc40.x86_64//rpm",
+        "@libtirpc-0__1.3.6-1.rc3.fc40.x86_64//rpm",
         "@libtool-ltdl-0__2.4.7-10.fc40.x86_64//rpm",
         "@libunistring-0__1.1-7.fc40.x86_64//rpm",
         "@liburing-0__2.5-3.fc40.x86_64//rpm",
@@ -157,11 +156,11 @@
         "@libuuid-0__2.40.2-1.fc40.x86_64//rpm",
         "@libuuid-devel-0__2.40.2-1.fc40.x86_64//rpm",
         "@libverto-0__0.3.2-8.fc40.x86_64//rpm",
-        "@libxcrypt-0__4.4.36-5.fc40.x86_64//rpm",
-        "@libxcrypt-devel-0__4.4.36-5.fc40.x86_64//rpm",
-        "@libxcrypt-static-0__4.4.36-5.fc40.x86_64//rpm",
+        "@libxcrypt-0__4.4.37-4.fc40.x86_64//rpm",
+        "@libxcrypt-devel-0__4.4.37-4.fc40.x86_64//rpm",
+        "@libxcrypt-static-0__4.4.37-4.fc40.x86_64//rpm",
         "@libxdp-0__1.4.2-1.fc40.x86_64//rpm",
-        "@libxml2-0__2.12.8-1.fc40.x86_64//rpm",
+        "@libxml2-0__2.12.9-1.fc40.x86_64//rpm",
         "@libzstd-0__1.5.6-1.fc40.x86_64//rpm",
         "@libzstd-devel-0__1.5.6-1.fc40.x86_64//rpm",
         "@lld-0__18.1.8-1.fc40.x86_64//rpm",
@@ -181,20 +180,20 @@
         "@ncurses-0__6.4-12.20240127.fc40.x86_64//rpm",
         "@ncurses-base-0__6.4-12.20240127.fc40.x86_64//rpm",
         "@ncurses-libs-0__6.4-12.20240127.fc40.x86_64//rpm",
-        "@ndctl-libs-0__79-1.fc40.x86_64//rpm",
+        "@ndctl-libs-0__80-1.fc40.x86_64//rpm",
         "@nettle-0__3.9.1-6.fc40.x86_64//rpm",
         "@npth-0__1.7-1.fc40.x86_64//rpm",
         "@numactl-libs-0__2.0.16-5.fc40.x86_64//rpm",
         "@ocaml-srpm-macros-0__9-3.fc40.x86_64//rpm",
         "@openblas-srpm-macros-0__2-16.fc40.x86_64//rpm",
-        "@openldap-0__2.6.7-1.fc40.x86_64//rpm",
+        "@openldap-0__2.6.8-1.fc40.x86_64//rpm",
         "@openssl-devel-1__3.2.2-3.fc40.x86_64//rpm",
         "@openssl-libs-1__3.2.2-3.fc40.x86_64//rpm",
         "@p11-kit-0__0.25.5-1.fc40.x86_64//rpm",
         "@p11-kit-trust-0__0.25.5-1.fc40.x86_64//rpm",
         "@package-notes-srpm-macros-0__0.5-11.fc40.x86_64//rpm",
-        "@pam-0__1.6.1-3.fc40.x86_64//rpm",
-        "@pam-libs-0__1.6.1-3.fc40.x86_64//rpm",
+        "@pam-0__1.6.1-5.fc40.x86_64//rpm",
+        "@pam-libs-0__1.6.1-5.fc40.x86_64//rpm",
         "@patch-0__2.7.6-24.fc40.x86_64//rpm",
         "@pcre2-0__10.44-1.fc40.x86_64//rpm",
         "@pcre2-syntax-0__10.44-1.fc40.x86_64//rpm",
@@ -296,8 +295,8 @@
         "@perl-Math-Complex-0__1.62-506.fc40.x86_64//rpm",
         "@perl-Memoize-0__1.16-506.fc40.x86_64//rpm",
         "@perl-Module-Build-2__0.42.34-5.fc40.x86_64//rpm",
-        "@perl-Module-CoreList-1__5.20240920-1.fc40.x86_64//rpm",
-        "@perl-Module-CoreList-tools-1__5.20240920-1.fc40.x86_64//rpm",
+        "@perl-Module-CoreList-1__5.20241120-1.fc40.x86_64//rpm",
+        "@perl-Module-CoreList-tools-1__5.20241120-1.fc40.x86_64//rpm",
         "@perl-Module-Load-1__0.36-503.fc40.x86_64//rpm",
         "@perl-Module-Load-Conditional-0__0.74-503.fc40.x86_64//rpm",
         "@perl-Module-Loaded-1__0.08-506.fc40.x86_64//rpm",
@@ -424,23 +423,23 @@
         "@policycoreutils-python-utils-0__3.7-3.fc40.x86_64//rpm",
         "@popt-0__1.19-6.fc40.x86_64//rpm",
         "@publicsuffix-list-dafsa-0__20240107-3.fc40.x86_64//rpm",
-        "@pyproject-srpm-macros-0__1.15.1-1.fc40.x86_64//rpm",
+        "@pyproject-srpm-macros-0__1.16.3-1.fc40.x86_64//rpm",
         "@python-pip-wheel-0__23.3.2-2.fc40.x86_64//rpm",
         "@python-srpm-macros-0__3.12-8.fc40.x86_64//rpm",
-        "@python-unversioned-command-0__3.12.7-1.fc40.x86_64//rpm",
-        "@python3-0__3.12.7-1.fc40.x86_64//rpm",
+        "@python-unversioned-command-0__3.12.8-2.fc40.x86_64//rpm",
+        "@python3-0__3.12.8-2.fc40.x86_64//rpm",
         "@python3-audit-0__4.0.2-1.fc40.x86_64//rpm",
         "@python3-distro-0__1.9.0-3.fc40.x86_64//rpm",
-        "@python3-libs-0__3.12.7-1.fc40.x86_64//rpm",
+        "@python3-libs-0__3.12.8-2.fc40.x86_64//rpm",
         "@python3-libselinux-0__3.7-5.fc40.x86_64//rpm",
         "@python3-libsemanage-0__3.7-2.fc40.x86_64//rpm",
         "@python3-policycoreutils-0__3.7-3.fc40.x86_64//rpm",
         "@python3-pyparsing-0__3.1.2-2.fc40.x86_64//rpm",
         "@python3-setools-0__4.5.1-2.fc40.x86_64//rpm",
         "@python3-setuptools-0__69.0.3-4.fc40.x86_64//rpm",
-        "@qemu-common-2__8.2.7-1.fc40.x86_64//rpm",
-        "@qemu-img-2__8.2.7-1.fc40.x86_64//rpm",
-        "@qemu-system-x86-core-2__8.2.7-1.fc40.x86_64//rpm",
+        "@qemu-common-2__8.2.8-2.fc40.x86_64//rpm",
+        "@qemu-img-2__8.2.8-2.fc40.x86_64//rpm",
+        "@qemu-system-x86-core-2__8.2.8-2.fc40.x86_64//rpm",
         "@qt5-srpm-macros-0__5.15.15-1.fc40.x86_64//rpm",
         "@qt6-srpm-macros-0__6.7.2-2.fc40.x86_64//rpm",
         "@readline-0__8.2-8.fc40.x86_64//rpm",
@@ -448,31 +447,31 @@
         "@rpm-0__4.19.1.1-1.fc40.x86_64//rpm",
         "@rpm-libs-0__4.19.1.1-1.fc40.x86_64//rpm",
         "@rpm-plugin-selinux-0__4.19.1.1-1.fc40.x86_64//rpm",
-        "@rpm-sequoia-0__1.7.0-1.fc40.x86_64//rpm",
+        "@rpm-sequoia-0__1.7.0-3.fc40.x86_64//rpm",
         "@rsync-0__3.3.0-1.fc40.x86_64//rpm",
         "@rust-srpm-macros-0__26.3-1.fc40.x86_64//rpm",
         "@seabios-bin-0__1.16.3-2.fc40.x86_64//rpm",
         "@seavgabios-bin-0__1.16.3-2.fc40.x86_64//rpm",
         "@sed-0__4.9-1.fc40.x86_64//rpm",
-        "@selinux-policy-0__40.28-1.fc40.x86_64//rpm",
-        "@selinux-policy-minimum-0__40.28-1.fc40.x86_64//rpm",
+        "@selinux-policy-0__40.29-2.fc40.x86_64//rpm",
+        "@selinux-policy-minimum-0__40.29-2.fc40.x86_64//rpm",
         "@setup-0__2.14.5-2.fc40.x86_64//rpm",
         "@shadow-utils-2__4.15.1-4.fc40.x86_64//rpm",
         "@snappy-0__1.1.10-4.fc40.x86_64//rpm",
         "@sqlite-libs-0__3.45.1-2.fc40.x86_64//rpm",
-        "@systemd-0__255.13-1.fc40.x86_64//rpm",
-        "@systemd-libs-0__255.13-1.fc40.x86_64//rpm",
-        "@systemd-pam-0__255.13-1.fc40.x86_64//rpm",
-        "@systemtap-sdt-devel-0__5.2__tilde__pre17250223gd07e4284-1.fc40.x86_64//rpm",
+        "@systemd-0__255.15-1.fc40.x86_64//rpm",
+        "@systemd-libs-0__255.15-1.fc40.x86_64//rpm",
+        "@systemd-pam-0__255.15-1.fc40.x86_64//rpm",
+        "@systemtap-sdt-devel-0__5.2-1.fc40.x86_64//rpm",
         "@tar-2__1.35-3.fc40.x86_64//rpm",
         "@tpm2-tss-0__4.1.3-1.fc40.x86_64//rpm",
         "@tzdata-0__2024a-5.fc40.x86_64//rpm",
         "@unzip-0__6.0-63.fc40.x86_64//rpm",
         "@util-linux-0__2.40.2-1.fc40.x86_64//rpm",
         "@util-linux-core-0__2.40.2-1.fc40.x86_64//rpm",
-        "@xen-libs-0__4.18.3-2.fc40.x86_64//rpm",
-        "@xen-licenses-0__4.18.3-2.fc40.x86_64//rpm",
-        "@xxhash-libs-0__0.8.2-4.fc40.x86_64//rpm",
+        "@xen-libs-0__4.18.4-1.fc40.x86_64//rpm",
+        "@xen-licenses-0__4.18.4-1.fc40.x86_64//rpm",
+        "@xxhash-libs-0__0.8.3-1.fc40.x86_64//rpm",
         "@xz-1__5.4.6-3.fc40.x86_64//rpm",
         "@xz-libs-1__5.4.6-3.fc40.x86_64//rpm",
         "@yajl-0__2.1.0-23.fc40.x86_64//rpm",