diff --git a/bazel/toolchains/dnf_deps.bzl b/bazel/toolchains/dnf_deps.bzl
index e33e4933a..c8bf1cf65 100644
--- a/bazel/toolchains/dnf_deps.bzl
+++ b/bazel/toolchains/dnf_deps.bzl
@@ -5,11 +5,11 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 def dnf_deps():
     http_archive(
         name = "bazeldnf",
-        sha256 = "6104de1d657ae524bef5af86b153b82f114f532fe2e7eb02beb2e950550a88fe",
-        strip_prefix = "bazeldnf-45f5d74ba73710b538c57c9d43d88c583aab9d3a",
+        sha256 = "904ecf035e73fe0988a73ffe2af83d213b18d885ad1f5cd0dc79aeb58340345e",
+        strip_prefix = "bazeldnf-2498c863339d5cdf30d6637771784d934b8cb3da",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/6104de1d657ae524bef5af86b153b82f114f532fe2e7eb02beb2e950550a88fe",
-            "https://github.com/rmohr/bazeldnf/archive/45f5d74ba73710b538c57c9d43d88c583aab9d3a.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/904ecf035e73fe0988a73ffe2af83d213b18d885ad1f5cd0dc79aeb58340345e",
+            "https://github.com/rmohr/bazeldnf/archive/2498c863339d5cdf30d6637771784d934b8cb3da.tar.gz",
         ],
         type = "tar.gz",
     )
diff --git a/bazel/toolchains/oci_deps.bzl b/bazel/toolchains/oci_deps.bzl
index e429fd323..bbb2d95b3 100644
--- a/bazel/toolchains/oci_deps.bzl
+++ b/bazel/toolchains/oci_deps.bzl
@@ -5,11 +5,11 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 def oci_deps():
     http_archive(
         name = "rules_oci",
-        sha256 = "4f119dc9e08319a3262c04b334bda54ba0484ca34f8ead706dd2397fc11816f7",
-        strip_prefix = "rules_oci-0.3.3",
-        urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/4f119dc9e08319a3262c04b334bda54ba0484ca34f8ead706dd2397fc11816f7",
-            "https://github.com/bazel-contrib/rules_oci/releases/download/v0.3.3/rules_oci-v0.3.3.tar.gz",
-        ],
+        sha256 = "4a738bdbeacb0e1df070209dddfa7b55fed9bbc553b905cf3d2dd25115e0b598",
+        strip_prefix = "rules_oci-0.3.8",
         type = "tar.gz",
+        urls = [
+            "https://cdn.confidential.cloud/constellation/cas/sha256/4a738bdbeacb0e1df070209dddfa7b55fed9bbc553b905cf3d2dd25115e0b598",
+            "https://github.com/bazel-contrib/rules_oci/releases/download/v0.3.8/rules_oci-v0.3.8.tar.gz",
+        ],
     )