diff --git a/build/fietsje/deps_containerd.go b/build/fietsje/deps_containerd.go
index 6eea0e2..79b46aa 100644
--- a/build/fietsje/deps_containerd.go
+++ b/build/fietsje/deps_containerd.go
@@ -18,7 +18,7 @@
 
 func depsContainerd(p *planner) {
 	p.collectOverride(
-		"github.com/containerd/containerd", "8e685f78cf66e2901b2fbed2fdddd64449a74ab9",
+		"github.com/containerd/containerd", "v1.4.0-beta.2",
 		buildTags("no_zfs", "no_aufs", "no_devicemapper", "no_btrfs"),
 		disabledProtoBuild,
 	).use(
@@ -33,21 +33,24 @@
 		"github.com/containerd/fifo",
 		"github.com/containerd/go-cni",
 		"github.com/containerd/go-runc",
+		"github.com/containerd/imgcrypt",
+		"github.com/containers/ocicrypt",
 		"github.com/containerd/ttrpc",
 		"github.com/containerd/typeurl",
 		"github.com/containernetworking/cni",
 		"github.com/coreos/go-systemd/v22",
-		"github.com/cpuguy83/go-md2man",
+		"github.com/cpuguy83/go-md2man/v2",
 		"github.com/davecgh/go-spew",
-		"github.com/docker/distribution",
 		"github.com/docker/docker",
 		"github.com/docker/go-events",
 		"github.com/docker/go-metrics",
 		"github.com/docker/go-units",
 		"github.com/docker/spdystream",
 		"github.com/emicklei/go-restful",
+		"github.com/fullsailor/pkcs7",
 		"github.com/godbus/dbus/v5",
 		"github.com/gogo/protobuf",
+		"github.com/go-logr/logr",
 		"github.com/google/gofuzz",
 		"github.com/google/uuid",
 		"github.com/hashicorp/errwrap",
@@ -68,10 +71,9 @@
 		"github.com/prometheus/client_model",
 		"github.com/prometheus/common",
 		"github.com/prometheus/procfs",
-		"github.com/russross/blackfriday",
+		"github.com/russross/blackfriday/v2",
 		"github.com/seccomp/libseccomp-golang",
 		"github.com/sirupsen/logrus",
-		"github.com/stretchr/testify",
 		"github.com/syndtr/gocapability",
 		"github.com/tchap/go-patricia",
 		"github.com/urfave/cli",
@@ -84,8 +86,7 @@
 		"google.golang.org/genproto",
 		"gopkg.in/inf.v0",
 		"gopkg.in/yaml.v2",
-		"gotest.tools",
-		"k8s.io/klog",
+		"k8s.io/klog/v2",
 		"sigs.k8s.io/yaml",
 	).with(disabledProtoBuild).use(
 		"github.com/Microsoft/hcsshim",
diff --git a/build/fietsje/deps_kubernetes.go b/build/fietsje/deps_kubernetes.go
index 76a1f24..d274bfb 100644
--- a/build/fietsje/deps_kubernetes.go
+++ b/build/fietsje/deps_kubernetes.go
@@ -19,7 +19,7 @@
 func depsKubernetes(p *planner) {
 	// containerd and its deps
 	p.collect(
-		"k8s.io/kubernetes", "v1.19.0-alpha.2",
+		"k8s.io/kubernetes", "v1.19.0-rc.0",
 		buildTags("providerless"),
 		disabledProtoBuild,
 		patches(
@@ -69,7 +69,7 @@
 		"github.com/bgentry/speakeasy",
 		"github.com/blang/semver",
 		"github.com/chai2010/gettext-go",
-		"github.com/checkpoint-restore/go-criu",
+		"github.com/checkpoint-restore/go-criu/v4",
 		"github.com/container-storage-interface/spec",
 		"github.com/coreos/go-oidc",
 		"github.com/coreos/go-semver",
@@ -79,6 +79,7 @@
 		"github.com/daviddengcn/go-colortext",
 		"github.com/dgrijalva/jwt-go",
 		"github.com/docker/go-connections",
+		"github.com/docker/distribution",
 		"github.com/dustin/go-humanize",
 		"github.com/euank/go-kmsg-parser",
 		"github.com/evanphx/json-patch",
@@ -115,9 +116,11 @@
 		"github.com/mattn/go-isatty",
 		"github.com/mattn/go-runewidth",
 		"github.com/mindprince/gonvml",
+		"github.com/mistifyio/go-zfs",
 		"github.com/mitchellh/go-wordwrap",
 		"github.com/mitchellh/mapstructure",
 		"github.com/moby/term",
+		"github.com/moby/sys/mountinfo",
 		"github.com/morikuni/aec",
 		"github.com/mrunalp/fileutils",
 		"github.com/munnerz/goautoneg",
@@ -126,9 +129,11 @@
 		"github.com/peterbourgon/diskv",
 		"github.com/pquerna/cachecontrol",
 		"github.com/robfig/cron",
+		"github.com/russross/blackfriday",
 		"github.com/soheilhy/cmux",
 		"github.com/spf13/afero",
 		"github.com/spf13/pflag",
+		"github.com/stretchr/testify",
 		"github.com/tmc/grpc-websocket-proxy",
 		"github.com/vishvananda/netlink",
 		"github.com/vishvananda/netns",
@@ -148,7 +153,7 @@
 		"sigs.k8s.io/kustomize",
 		"sigs.k8s.io/structured-merge-diff/v3",
 		"vbom.ml/util",
-	).with(patches("cadvisor.patch", "cadvisor-build.patch")).use(
+	).use(
 		"github.com/google/cadvisor",
 	).with(disabledProtoBuild).use(
 		"go.etcd.io/etcd",
diff --git a/build/print-workspace-status.sh b/build/print-workspace-status.sh
index fcb38b3..fb46a5f 100755
--- a/build/print-workspace-status.sh
+++ b/build/print-workspace-status.sh
@@ -16,7 +16,7 @@
 # TODO(q3k): unify with //third_party/go/repsitories.bzl.
 KUBERNETES_gitMajor="1"
 KUBERNETES_gitMinor="19"
-KUBERNETES_gitVersion="v1.19.0-alpha.2+nxt"
+KUBERNETES_gitVersion="v1.19.0-rc.0+nxt"
 
 cat <<EOF
 KUBERNETES_gitCommit $(git rev-parse "HEAD^{commit}")