diff --git a/third_party/sandboxroot/BUILD.bazel b/third_party/sandboxroot/BUILD.bazel
index d057e18..0fe8c1a 100644
--- a/third_party/sandboxroot/BUILD.bazel
+++ b/third_party/sandboxroot/BUILD.bazel
@@ -13,11 +13,11 @@
         "@acpica-tools-0__20220331-4.fc37.x86_64//rpm",
         "@alternatives-0__1.24-1.fc37.x86_64//rpm",
         "@ansible-srpm-macros-0__1-10.fc37.x86_64//rpm",
-        "@audit-libs-0__3.1.2-1.fc37.x86_64//rpm",
+        "@audit-libs-0__3.1.2-5.fc37.x86_64//rpm",
         "@authselect-0__1.4.2-1.fc37.x86_64//rpm",
         "@authselect-libs-0__1.4.2-1.fc37.x86_64//rpm",
         "@basesystem-0__11-14.fc37.x86_64//rpm",
-        "@bash-0__5.2.15-1.fc37.x86_64//rpm",
+        "@bash-0__5.2.21-1.fc37.x86_64//rpm",
         "@bc-0__1.07.1-16.fc37.x86_64//rpm",
         "@binutils-0__2.38-27.fc37.x86_64//rpm",
         "@binutils-gold-0__2.38-27.fc37.x86_64//rpm",
@@ -33,7 +33,7 @@
         "@cpp-0__12.3.1-1.fc37.x86_64//rpm",
         "@cracklib-0__2.9.7-30.fc37.x86_64//rpm",
         "@crypto-policies-0__20220815-1.gite4ed860.fc37.x86_64//rpm",
-        "@curl-minimal-0__7.85.0-11.fc37.x86_64//rpm",
+        "@curl-minimal-0__7.85.0-12.fc37.x86_64//rpm",
         "@cyrus-sasl-lib-0__2.1.28-8.fc37.x86_64//rpm",
         "@daxctl-libs-0__78-1.fc37.x86_64//rpm",
         "@dbus-1__1.14.10-1.fc37.x86_64//rpm",
@@ -45,16 +45,16 @@
         "@ed-0__1.18-2.fc37.x86_64//rpm",
         "@edk2-ovmf-0__20230524-3.fc37.x86_64//rpm",
         "@efi-srpm-macros-0__5-6.fc37.x86_64//rpm",
-        "@elfutils-debuginfod-client-0__0.189-3.fc37.x86_64//rpm",
-        "@elfutils-default-yama-scope-0__0.189-3.fc37.x86_64//rpm",
-        "@elfutils-libelf-0__0.189-3.fc37.x86_64//rpm",
-        "@elfutils-libelf-devel-0__0.189-3.fc37.x86_64//rpm",
-        "@elfutils-libs-0__0.189-3.fc37.x86_64//rpm",
+        "@elfutils-debuginfod-client-0__0.190-2.fc37.x86_64//rpm",
+        "@elfutils-default-yama-scope-0__0.190-2.fc37.x86_64//rpm",
+        "@elfutils-libelf-0__0.190-2.fc37.x86_64//rpm",
+        "@elfutils-libelf-devel-0__0.190-2.fc37.x86_64//rpm",
+        "@elfutils-libs-0__0.190-2.fc37.x86_64//rpm",
         "@expat-0__2.5.0-1.fc37.x86_64//rpm",
         "@fedora-gpg-keys-0__37-2.x86_64//rpm",
-        "@fedora-release-common-0__37-16.x86_64//rpm",
-        "@fedora-release-container-0__37-16.x86_64//rpm",
-        "@fedora-release-identity-container-0__37-16.x86_64//rpm",
+        "@fedora-release-common-0__37-18.x86_64//rpm",
+        "@fedora-release-container-0__37-18.x86_64//rpm",
+        "@fedora-release-identity-container-0__37-18.x86_64//rpm",
         "@fedora-repos-0__37-2.x86_64//rpm",
         "@file-0__5.42-4.fc37.x86_64//rpm",
         "@file-libs-0__5.42-4.fc37.x86_64//rpm",
@@ -71,25 +71,22 @@
         "@gdbm-libs-1__1.23-2.fc37.x86_64//rpm",
         "@ghc-srpm-macros-0__1.6.1-1.fc37.x86_64//rpm",
         "@glib2-0__2.74.7-2.fc37.x86_64//rpm",
-        "@glibc-0__2.36-14.fc37.x86_64//rpm",
-        "@glibc-common-0__2.36-14.fc37.x86_64//rpm",
-        "@glibc-devel-0__2.36-14.fc37.x86_64//rpm",
-        "@glibc-headers-x86-0__2.36-14.fc37.x86_64//rpm",
-        "@glibc-langpack-en-0__2.36-14.fc37.x86_64//rpm",
-        "@glibc-static-0__2.36-14.fc37.x86_64//rpm",
+        "@glibc-0__2.36-18.fc37.x86_64//rpm",
+        "@glibc-common-0__2.36-18.fc37.x86_64//rpm",
+        "@glibc-devel-0__2.36-18.fc37.x86_64//rpm",
+        "@glibc-headers-x86-0__2.36-18.fc37.x86_64//rpm",
+        "@glibc-langpack-en-0__2.36-18.fc37.x86_64//rpm",
+        "@glibc-static-0__2.36-18.fc37.x86_64//rpm",
         "@gmp-1__6.2.1-3.fc37.x86_64//rpm",
         "@gnat-srpm-macros-0__5-1.fc37.x86_64//rpm",
         "@gnupg2-0__2.3.8-1.fc37.x86_64//rpm",
         "@gnutls-0__3.8.1-1.fc37.x86_64//rpm",
-        "@gnutls-dane-0__3.8.1-1.fc37.x86_64//rpm",
-        "@gnutls-utils-0__3.8.1-1.fc37.x86_64//rpm",
-        "@go-srpm-macros-0__3.2.0-1.fc37.x86_64//rpm",
+        "@go-srpm-macros-0__3.3.1-1.fc37.x86_64//rpm",
         "@grep-0__3.7-4.fc37.x86_64//rpm",
         "@groff-base-0__1.22.4-10.fc37.x86_64//rpm",
         "@guile22-0__2.2.7-6.fc37.x86_64//rpm",
         "@gzip-0__1.12-2.fc37.x86_64//rpm",
         "@ipxe-roms-qemu-0__20220210-2.git64113751.fc37.x86_64//rpm",
-        "@json-glib-0__1.6.6-3.fc37.x86_64//rpm",
         "@kernel-headers-0__6.5.4-100.fc37.x86_64//rpm",
         "@kernel-srpm-macros-0__1.0-15.fc37.x86_64//rpm",
         "@keyutils-libs-0__1.6.1-5.fc37.x86_64//rpm",
@@ -106,7 +103,7 @@
         "@libcap-0__2.48-5.fc37.x86_64//rpm",
         "@libcap-ng-0__0.8.3-3.fc37.x86_64//rpm",
         "@libcom_err-0__1.46.5-3.fc37.x86_64//rpm",
-        "@libcurl-minimal-0__7.85.0-11.fc37.x86_64//rpm",
+        "@libcurl-minimal-0__7.85.0-12.fc37.x86_64//rpm",
         "@libdb-0__5.3.28-53.fc37.x86_64//rpm",
         "@libeconf-0__0.5.2-1.fc37.x86_64//rpm",
         "@libedit-0__3.1-43.20221009cvs.fc37.x86_64//rpm",
@@ -124,7 +121,7 @@
         "@libksba-0__1.6.3-1.fc37.x86_64//rpm",
         "@libmount-0__2.38.1-1.fc37.x86_64//rpm",
         "@libmpc-0__1.2.1-5.fc37.x86_64//rpm",
-        "@libnghttp2-0__1.51.0-1.fc37.x86_64//rpm",
+        "@libnghttp2-0__1.51.0-2.fc37.x86_64//rpm",
         "@libnl3-0__3.7.0-2.fc37.x86_64//rpm",
         "@libnsl2-0__2.0.0-4.fc37.x86_64//rpm",
         "@libpkgconf-0__1.8.0-3.fc37.x86_64//rpm",
@@ -146,7 +143,6 @@
         "@libtasn1-0__4.19.0-1.fc37.x86_64//rpm",
         "@libtirpc-0__1.3.3-1.rc1.fc37.x86_64//rpm",
         "@libtool-ltdl-0__2.4.7-2.fc37.x86_64//rpm",
-        "@libtpms-0__0.9.6-1.fc37.x86_64//rpm",
         "@libunistring-0__1.0-2.fc37.x86_64//rpm",
         "@liburing-0__2.3-1.fc37.x86_64//rpm",
         "@libutempter-0__1.2.1-7.fc37.x86_64//rpm",
@@ -186,8 +182,8 @@
         "@openldap-0__2.6.6-1.fc37.x86_64//rpm",
         "@openssl-devel-1__3.0.9-1.fc37.x86_64//rpm",
         "@openssl-libs-1__3.0.9-1.fc37.x86_64//rpm",
-        "@p11-kit-0__0.25.0-1.fc37.x86_64//rpm",
-        "@p11-kit-trust-0__0.25.0-1.fc37.x86_64//rpm",
+        "@p11-kit-0__0.25.3-1.fc37.x86_64//rpm",
+        "@p11-kit-trust-0__0.25.3-1.fc37.x86_64//rpm",
         "@package-notes-srpm-macros-0__0.5-7.fc37.x86_64//rpm",
         "@pam-0__1.5.2-14.fc37.x86_64//rpm",
         "@pam-libs-0__1.5.2-14.fc37.x86_64//rpm",
@@ -295,8 +291,8 @@
         "@perl-Math-Complex-0__1.59-494.fc37.x86_64//rpm",
         "@perl-Memoize-0__1.03-494.fc37.x86_64//rpm",
         "@perl-Module-Build-2__0.42.31-15.fc37.x86_64//rpm",
-        "@perl-Module-CoreList-1__5.20230920-1.fc37.x86_64//rpm",
-        "@perl-Module-CoreList-tools-1__5.20230920-1.fc37.x86_64//rpm",
+        "@perl-Module-CoreList-1__5.20231120-1.fc37.x86_64//rpm",
+        "@perl-Module-CoreList-tools-1__5.20231120-1.fc37.x86_64//rpm",
         "@perl-Module-Load-1__0.36-489.fc37.x86_64//rpm",
         "@perl-Module-Load-Conditional-0__0.74-489.fc37.x86_64//rpm",
         "@perl-Module-Loaded-1__0.08-494.fc37.x86_64//rpm",
@@ -307,7 +303,7 @@
         "@perl-Net-0__1.03-494.fc37.x86_64//rpm",
         "@perl-Net-Ping-0__2.75-1.fc37.x86_64//rpm",
         "@perl-ODBM_File-0__1.17-494.fc37.x86_64//rpm",
-        "@perl-Object-HashBase-0__0.009-10.fc37.x86_64//rpm",
+        "@perl-Object-HashBase-0__0.010-1.fc37.x86_64//rpm",
         "@perl-Opcode-0__1.57-494.fc37.x86_64//rpm",
         "@perl-POSIX-0__2.03-494.fc37.x86_64//rpm",
         "@perl-Package-Generator-0__1.106-26.fc37.x86_64//rpm",
@@ -420,16 +416,15 @@
         "@policycoreutils-0__3.5-1.fc37.x86_64//rpm",
         "@policycoreutils-python-utils-0__3.5-1.fc37.x86_64//rpm",
         "@popt-0__1.19-1.fc37.x86_64//rpm",
-        "@protobuf-c-0__1.4.1-2.fc37.x86_64//rpm",
         "@pyproject-srpm-macros-0__1.10.0-1.fc37.x86_64//rpm",
         "@python-pip-wheel-0__22.2.2-3.fc37.x86_64//rpm",
         "@python-setuptools-wheel-0__62.6.0-3.fc37.x86_64//rpm",
         "@python-srpm-macros-0__3.11-6.fc37.x86_64//rpm",
-        "@python-unversioned-command-0__3.11.5-1.fc37.x86_64//rpm",
-        "@python3-0__3.11.5-1.fc37.x86_64//rpm",
-        "@python3-audit-0__3.1.2-1.fc37.x86_64//rpm",
+        "@python-unversioned-command-0__3.11.6-1.fc37.x86_64//rpm",
+        "@python3-0__3.11.6-1.fc37.x86_64//rpm",
+        "@python3-audit-0__3.1.2-5.fc37.x86_64//rpm",
         "@python3-distro-0__1.7.0-3.fc37.x86_64//rpm",
-        "@python3-libs-0__3.11.5-1.fc37.x86_64//rpm",
+        "@python3-libs-0__3.11.6-1.fc37.x86_64//rpm",
         "@python3-libselinux-0__3.5-1.fc37.x86_64//rpm",
         "@python3-libsemanage-0__3.5-2.fc37.x86_64//rpm",
         "@python3-policycoreutils-0__3.5-1.fc37.x86_64//rpm",
@@ -438,42 +433,37 @@
         "@python3-setuptools-0__62.6.0-3.fc37.x86_64//rpm",
         "@qemu-common-2__7.0.0-15.fc37.x86_64//rpm",
         "@qemu-system-x86-core-2__7.0.0-15.fc37.x86_64//rpm",
-        "@qt5-srpm-macros-0__5.15.9-1.fc37.x86_64//rpm",
+        "@qt5-srpm-macros-0__5.15.10-1.fc37.x86_64//rpm",
+        "@qt6-srpm-macros-0__6.5.1-2.fc37.x86_64//rpm",
         "@readline-0__8.2-2.fc37.x86_64//rpm",
-        "@redhat-rpm-config-0__229-1.fc37.x86_64//rpm",
-        "@rpm-0__4.18.1-2.fc37.x86_64//rpm",
-        "@rpm-libs-0__4.18.1-2.fc37.x86_64//rpm",
-        "@rpm-plugin-selinux-0__4.18.1-2.fc37.x86_64//rpm",
-        "@rpmautospec-rpm-macros-0__0.3.5-1.fc37.x86_64//rpm",
+        "@redhat-rpm-config-0__230-1.fc37.x86_64//rpm",
+        "@rpm-0__4.18.2-1.fc37.x86_64//rpm",
+        "@rpm-libs-0__4.18.2-1.fc37.x86_64//rpm",
+        "@rpm-plugin-selinux-0__4.18.2-1.fc37.x86_64//rpm",
+        "@rpmautospec-rpm-macros-0__0.3.8-1.fc37.x86_64//rpm",
         "@rsync-0__3.2.7-1.fc37.x86_64//rpm",
-        "@rust-srpm-macros-0__25.2-1.fc37.x86_64//rpm",
+        "@rust-srpm-macros-0__25.2-2.fc37.x86_64//rpm",
         "@seabios-bin-0__1.16.2-1.fc37.x86_64//rpm",
         "@seavgabios-bin-0__1.16.2-1.fc37.x86_64//rpm",
         "@sed-0__4.8-11.fc37.x86_64//rpm",
-        "@selinux-policy-0__37.22-1.fc37.x86_64//rpm",
-        "@selinux-policy-minimum-0__37.22-1.fc37.x86_64//rpm",
+        "@selinux-policy-0__37.23-1.fc37.x86_64//rpm",
+        "@selinux-policy-minimum-0__37.23-1.fc37.x86_64//rpm",
         "@setup-0__2.14.1-2.fc37.x86_64//rpm",
         "@sgabios-bin-1__0.20180715git-9.fc37.x86_64//rpm",
         "@shadow-utils-2__4.12.3-6.fc37.x86_64//rpm",
         "@snappy-0__1.1.9-5.fc37.x86_64//rpm",
         "@sqlite-libs-0__3.40.0-1.fc37.x86_64//rpm",
-        "@swtpm-0__0.7.3-2.20220427gitf2268ee.fc37.x86_64//rpm",
-        "@swtpm-libs-0__0.7.3-2.20220427gitf2268ee.fc37.x86_64//rpm",
-        "@swtpm-tools-0__0.7.3-2.20220427gitf2268ee.fc37.x86_64//rpm",
-        "@systemd-0__251.14-2.fc37.x86_64//rpm",
-        "@systemd-libs-0__251.14-2.fc37.x86_64//rpm",
-        "@systemd-pam-0__251.14-2.fc37.x86_64//rpm",
+        "@systemd-0__251.19-1.fc37.x86_64//rpm",
+        "@systemd-libs-0__251.19-1.fc37.x86_64//rpm",
+        "@systemd-pam-0__251.19-1.fc37.x86_64//rpm",
         "@systemtap-sdt-devel-0__4.9-2.fc37.x86_64//rpm",
         "@tar-2__1.34-6.fc37.x86_64//rpm",
-        "@trousers-0__0.3.15-7.fc37.x86_64//rpm",
-        "@trousers-lib-0__0.3.15-7.fc37.x86_64//rpm",
         "@tzdata-0__2023c-1.fc37.x86_64//rpm",
-        "@unbound-libs-0__1.18.0-1.fc37.x86_64//rpm",
         "@unzip-0__6.0-58.fc37.x86_64//rpm",
         "@util-linux-0__2.38.1-1.fc37.x86_64//rpm",
         "@util-linux-core-0__2.38.1-1.fc37.x86_64//rpm",
-        "@xen-libs-0__4.16.5-2.fc37.x86_64//rpm",
-        "@xen-licenses-0__4.16.5-2.fc37.x86_64//rpm",
+        "@xen-libs-0__4.16.5-4.fc37.x86_64//rpm",
+        "@xen-licenses-0__4.16.5-4.fc37.x86_64//rpm",
         "@xxhash-libs-0__0.8.2-1.fc37.x86_64//rpm",
         "@xz-0__5.4.1-1.fc37.x86_64//rpm",
         "@xz-libs-0__5.4.1-1.fc37.x86_64//rpm",