diff --git a/.github/workflows/promotion-diff.yml b/.github/workflows/promotion-diff.yml
index c852f2b906..6be39fddbf 100644
--- a/.github/workflows/promotion-diff.yml
+++ b/.github/workflows/promotion-diff.yml
@@ -40,9 +40,9 @@ jobs:
       - name: Normalize kola-denylist.yaml
         run: |
           # When we promote to a production branch we strip out the
-          # snooze lines. Let's do the same here so we don't get warnings.
-          # See https://github.com/coreos/fedora-coreos-releng-automation/pull/165
-          sed -E -i 's/^(\s+)(snooze:\s+.*)/\1# \2 (disabled on promotion)/' origin/kola-denylist.yaml
+          # snooze and warn lines. Let's do the same here so we don't get warnings.
+          # See https://github.com/coreos/fedora-coreos-releng-automation/pull/179
+          sed -E -i 's/^(\s+)((snooze:|warn:)\s+.*)/\1# \2 (disabled on promotion)/' origin/kola-denylist.yaml
       - name: Compare trees
         uses: coreos/actions-lib/check-diff@main
         with:
diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index a382dbcbbd..b817eb6fa2 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -5,94 +5,91 @@
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
 - pattern: podman.workflow
   tracker: https://github.com/coreos/coreos-assembler/pull/1478
-- pattern: coreos.boot-mirror.luks
-  tracker: https://github.com/coreos/coreos-assembler/issues/3360
-  arches:
-    - ppc64le
-- pattern: coreos.boot-mirror
-  tracker: https://github.com/coreos/coreos-assembler/issues/3361
-  arches:
-    - ppc64le
 - pattern: ext.config.kdump.crash
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1430
-  # snooze: 2023-09-13 (disabled on promotion)
+  # snooze: 2023-09-28 (disabled on promotion)
   # warn: true (disabled on promotion)
   arches:
     - aarch64
   streams:
     - stable
     - testing
-    - next
     - testing-devel
-    - next-devel
-    - branched
 - pattern: ext.config.networking.nameserver
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  # snooze: 2023-09-13 (disabled on promotion)
+  # snooze: 2023-09-28 (disabled on promotion)
   # warn: true (disabled on promotion)
   streams:
     - rawhide
     - branched
     - next-devel
+    - next
 - pattern: ext.config.networking.no-persist-ip
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  # snooze: 2023-09-13 (disabled on promotion)
+  # snooze: 2023-09-28 (disabled on promotion)
   # warn: true (disabled on promotion)
   streams:
     - rawhide
     - branched
     - next-devel
+    - next
 - pattern: ext.config.networking.prefer-ignition-networking
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  # snooze: 2023-09-13 (disabled on promotion)
+  # snooze: 2023-09-28 (disabled on promotion)
   # warn: true (disabled on promotion)
   streams:
     - rawhide
     - branched
     - next-devel
+    - next
 - pattern: ext.config.networking.ifname-karg.everyboot-systemd-link-file
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  # snooze: 2023-09-13 (disabled on promotion)
+  # snooze: 2023-09-28 (disabled on promotion)
   # warn: true (disabled on promotion)
   streams:
     - rawhide
     - branched
     - next-devel
+    - next
 - pattern: ext.config.networking.force-persist-ip
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  # snooze: 2023-09-13 (disabled on promotion)
+  # snooze: 2023-09-28 (disabled on promotion)
   # warn: true (disabled on promotion)
   streams:
     - rawhide
     - branched
     - next-devel
+    - next
 - pattern: ext.config.networking.bridge-static-via-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  # snooze: 2023-09-13 (disabled on promotion)
+  # snooze: 2023-09-28 (disabled on promotion)
   # warn: true (disabled on promotion)
   streams:
     - rawhide
     - branched
     - next-devel
+    - next
 - pattern: ext.config.networking.ifname-karg.udev-rule-firstboot-propagation
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  # snooze: 2023-09-13 (disabled on promotion)
+  # snooze: 2023-09-28 (disabled on promotion)
   # warn: true (disabled on promotion)
   streams:
     - rawhide
     - branched
     - next-devel
+    - next
 - pattern: ext.config.networking.mtu-on-bond-kargs
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1542
-  # snooze: 2023-09-13 (disabled on promotion)
+  # snooze: 2023-09-28 (disabled on promotion)
   # warn: true (disabled on promotion)
   streams:
     - rawhide
     - branched
     - next-devel
+    - next
 - pattern: coreos.ignition.ssh.key
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1553
-  # snooze: 2023-09-04 (disabled on promotion)
+  # snooze: 2023-09-27 (disabled on promotion)
   # warn: true (disabled on promotion)
   platforms:
     - azure
@@ -102,3 +99,5 @@
   # warn: true (disabled on promotion)
   streams:
     - rawhide
+    - next-devel
+    - next
diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 3a067e827e..b46e4eedc4 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -85,7 +85,7 @@
       "evra": "3.6.1-4.fc38.aarch64"
     },
     "btrfs-progs": {
-      "evra": "6.3.3-1.fc38.aarch64"
+      "evra": "6.5.1-1.fc38.aarch64"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.aarch64"
@@ -124,7 +124,7 @@
       "evra": "19-2.fc38.aarch64"
     },
     "cloud-utils-growpart": {
-      "evra": "0.31-12.fc38.noarch"
+      "evra": "0.33-3.fc38.noarch"
     },
     "conmon": {
       "evra": "2:2.1.7-2.fc38.aarch64"
@@ -157,10 +157,10 @@
       "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-5.fc38.aarch64"
+      "evra": "0.18.0-1.fc38.aarch64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-5.fc38.aarch64"
+      "evra": "0.18.0-1.fc38.aarch64"
     },
     "coreutils": {
       "evra": "9.1-12.fc38.aarch64"
@@ -175,13 +175,13 @@
       "evra": "2.9.11-1.fc38.aarch64"
     },
     "criu": {
-      "evra": "3.17.1-5.fc38.aarch64"
+      "evra": "3.18-1.fc38.aarch64"
     },
     "criu-libs": {
-      "evra": "3.17.1-5.fc38.aarch64"
+      "evra": "3.18-1.fc38.aarch64"
     },
     "crun": {
-      "evra": "1.8.7-1.fc38.aarch64"
+      "evra": "1.9-1.fc38.aarch64"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -193,7 +193,7 @@
       "evra": "2.6.1-1.fc38.aarch64"
     },
     "curl": {
-      "evra": "8.0.1-3.fc38.aarch64"
+      "evra": "8.0.1-4.fc38.aarch64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.aarch64"
@@ -202,16 +202,16 @@
       "evra": "2.1.28-9.fc38.aarch64"
     },
     "dbus": {
-      "evra": "1:1.14.8-1.fc38.aarch64"
+      "evra": "1:1.14.10-1.fc38.aarch64"
     },
     "dbus-broker": {
       "evra": "33-1.fc38.aarch64"
     },
     "dbus-common": {
-      "evra": "1:1.14.8-1.fc38.noarch"
+      "evra": "1:1.14.10-1.fc38.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.8-1.fc38.aarch64"
+      "evra": "1:1.14.10-1.fc38.aarch64"
     },
     "device-mapper": {
       "evra": "1.02.189-2.fc38.aarch64"
@@ -280,7 +280,7 @@
       "evra": "0.189-3.fc38.aarch64"
     },
     "ethtool": {
-      "evra": "2:6.4-1.fc38.aarch64"
+      "evra": "2:6.5-1.fc38.aarch64"
     },
     "expat": {
       "evra": "2.5.0-2.fc38.aarch64"
@@ -349,7 +349,7 @@
       "evra": "3.14.1-1.fc38.aarch64"
     },
     "fwupd": {
-      "evra": "1.9.4-1.fc38.aarch64"
+      "evra": "1.9.5-1.fc38.aarch64"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.aarch64"
@@ -373,19 +373,19 @@
       "evra": "2.41.0-1.fc38.aarch64"
     },
     "glib2": {
-      "evra": "2.76.5-1.fc38.aarch64"
+      "evra": "2.76.5-2.fc38.aarch64"
     },
     "glibc": {
-      "evra": "2.37-4.fc38.aarch64"
+      "evra": "2.37-5.fc38.aarch64"
     },
     "glibc-common": {
-      "evra": "2.37-4.fc38.aarch64"
+      "evra": "2.37-5.fc38.aarch64"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-4.fc38.aarch64"
+      "evra": "2.37-5.fc38.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-4.fc38.aarch64"
+      "evra": "2.37-5.fc38.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.aarch64"
@@ -406,16 +406,19 @@
       "evra": "3.8-3.fc38.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-97.fc38.noarch"
+      "evra": "1:2.06-98.fc38.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-97.fc38.aarch64"
+      "evra": "1:2.06-98.fc38.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-97.fc38.aarch64"
+      "evra": "1:2.06-98.fc38.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-97.fc38.aarch64"
+      "evra": "1:2.06-98.fc38.aarch64"
+    },
+    "gvisor-tap-vsock-gvforwarder": {
+      "evra": "6:0.7.0-6.fc38.aarch64"
     },
     "gzip": {
       "evra": "1.12-3.fc38.aarch64"
@@ -436,10 +439,10 @@
       "evra": "1.0.3-1.fc38.aarch64"
     },
     "iproute": {
-      "evra": "6.1.0-1.fc38.aarch64"
+      "evra": "6.4.0-1.fc38.aarch64"
     },
     "iproute-tc": {
-      "evra": "6.1.0-1.fc38.aarch64"
+      "evra": "6.4.0-1.fc38.aarch64"
     },
     "iptables-legacy": {
       "evra": "1.8.9-4.fc38.aarch64"
@@ -502,16 +505,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.12-200.fc38.aarch64"
+      "evra": "6.4.15-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.4.12-200.fc38.aarch64"
+      "evra": "6.4.15-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.4.12-200.fc38.aarch64"
+      "evra": "6.4.15-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.4.12-200.fc38.aarch64"
+      "evra": "6.4.15-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -574,7 +577,7 @@
       "evra": "2.48-6.fc38.aarch64"
     },
     "libcap-ng": {
-      "evra": "0.8.3-5.fc38.aarch64"
+      "evra": "0.8.3-8.fc38.aarch64"
     },
     "libcbor": {
       "evra": "0.7.0-9.fc38.aarch64"
@@ -586,7 +589,7 @@
       "evra": "1.46.5-4.fc38.aarch64"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-3.fc38.aarch64"
+      "evra": "8.0.1-4.fc38.aarch64"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.aarch64"
@@ -844,7 +847,7 @@
       "evra": "2.10.4-1.fc38.aarch64"
     },
     "libxmlb": {
-      "evra": "0.3.12-1.fc38.aarch64"
+      "evra": "0.3.14-1.fc38.aarch64"
     },
     "libyaml": {
       "evra": "0.2.5-9.fc38.aarch64"
@@ -937,7 +940,7 @@
       "evra": "1:1.0.5-2.fc38.aarch64"
     },
     "nmstate": {
-      "evra": "2.2.13-2.fc38.aarch64"
+      "evra": "2.2.15-1.fc38.aarch64"
     },
     "npth": {
       "evra": "1.6-12.fc38.aarch64"
@@ -997,10 +1000,10 @@
       "evra": "1.5.2-16.fc38.aarch64"
     },
     "passt": {
-      "evra": "0^20230823.ga7e4bfb-1.fc38.aarch64"
+      "evra": "0^20230908.g05627dc-1.fc38.aarch64"
     },
     "passt-selinux": {
-      "evra": "0^20230823.ga7e4bfb-1.fc38.noarch"
+      "evra": "0^20230908.g05627dc-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.aarch64"
@@ -1024,10 +1027,10 @@
       "evra": "1.8.0-6.fc38.aarch64"
     },
     "podman": {
-      "evra": "5:4.6.2-1.fc38.aarch64"
+      "evra": "5:4.6.2-3.fc38.aarch64"
     },
     "podman-plugins": {
-      "evra": "5:4.6.2-1.fc38.aarch64"
+      "evra": "5:4.6.2-3.fc38.aarch64"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.aarch64"
@@ -1075,10 +1078,10 @@
       "evra": "4.18.1-3.fc38.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2023.5-1.fc38.aarch64"
+      "evra": "2023.7-1.fc38.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.5-1.fc38.aarch64"
+      "evra": "2023.7-1.fc38.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.aarch64"
@@ -1090,7 +1093,7 @@
       "evra": "3.2.7-2.fc38.aarch64"
     },
     "runc": {
-      "evra": "2:1.1.7-1.fc38.aarch64"
+      "evra": "2:1.1.8-1.fc38.aarch64"
     },
     "samba-client-libs": {
       "evra": "2:4.18.6-1.fc38.aarch64"
@@ -1105,10 +1108,10 @@
       "evra": "4.8-12.fc38.aarch64"
     },
     "selinux-policy": {
-      "evra": "38.25-1.fc38.noarch"
+      "evra": "38.27-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.25-1.fc38.noarch"
+      "evra": "38.27-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1132,7 +1135,7 @@
       "evra": "15.6-2.aarch64"
     },
     "skopeo": {
-      "evra": "1:1.13.2-1.fc38.aarch64"
+      "evra": "1:1.13.3-1.fc38.aarch64"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.aarch64"
@@ -1189,22 +1192,22 @@
       "evra": "1.9.13-2.p2.fc38.aarch64"
     },
     "systemd": {
-      "evra": "253.7-1.fc38.aarch64"
+      "evra": "253.9-1.fc38.aarch64"
     },
     "systemd-container": {
-      "evra": "253.7-1.fc38.aarch64"
+      "evra": "253.9-1.fc38.aarch64"
     },
     "systemd-libs": {
-      "evra": "253.7-1.fc38.aarch64"
+      "evra": "253.9-1.fc38.aarch64"
     },
     "systemd-pam": {
-      "evra": "253.7-1.fc38.aarch64"
+      "evra": "253.9-1.fc38.aarch64"
     },
     "systemd-resolved": {
-      "evra": "253.7-1.fc38.aarch64"
+      "evra": "253.9-1.fc38.aarch64"
     },
     "systemd-udev": {
-      "evra": "253.7-1.fc38.aarch64"
+      "evra": "253.9-1.fc38.aarch64"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.aarch64"
@@ -1234,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1712-1.fc38.noarch"
+      "evra": "2:9.0.1872-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1712-1.fc38.aarch64"
+      "evra": "2:9.0.1872-1.fc38.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc38.aarch64"
@@ -1277,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-02T00:00:00Z",
+    "generated": "2023-09-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-01T22:30:50Z"
+        "generated": "2023-09-17T00:27:35Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-02T01:03:54Z"
+        "generated": "2023-09-18T01:16:31Z"
       }
     }
   }
diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 96dfc1c6ff..1c3ccc1de6 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,32 +9,36 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  kernel:
-    evr: 6.4.15-200.fc38
+  coreos-installer:
+    evr: 0.18.0-1.fc38
     metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-775674d7f1
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1555
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-c34621867f
       type: fast-track
-  kernel-core:
-    evr: 6.4.15-200.fc38
+  coreos-installer-bootinfra:
+    evr: 0.18.0-1.fc38
     metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-775674d7f1
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1555
-      type: fast-track
-  kernel-modules:
-    evr: 6.4.15-200.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-775674d7f1
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1555
-      type: fast-track
-  kernel-modules-core:
-    evr: 6.4.15-200.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-775674d7f1
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1555
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-c34621867f
       type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:
       reason: https://github.com/coreos/fedora-coreos-tracker/issues/1476
       type: pin
+  podman:
+    evr: 5:4.6.2-3.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cf6a4b906e
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1557#issuecomment-1720041318
+      type: fast-track
+  podman-plugins:
+    evr: 5:4.6.2-3.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cf6a4b906e
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1557#issuecomment-1720041318
+      type: fast-track
+  gvisor-tap-vsock-gvforwarder:
+    evr: 6:0.7.0-6.fc38
+    metadata:
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-cf6a4b906e
+      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1557#issuecomment-1720041318
+      type: fast-track
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index a08c40167e..ed7ec2851a 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -85,7 +85,7 @@
       "evra": "3.6.1-4.fc38.ppc64le"
     },
     "btrfs-progs": {
-      "evra": "6.3.3-1.fc38.ppc64le"
+      "evra": "6.5.1-1.fc38.ppc64le"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.ppc64le"
@@ -124,7 +124,7 @@
       "evra": "19-2.fc38.ppc64le"
     },
     "cloud-utils-growpart": {
-      "evra": "0.31-12.fc38.noarch"
+      "evra": "0.33-3.fc38.noarch"
     },
     "conmon": {
       "evra": "2:2.1.7-2.fc38.ppc64le"
@@ -157,10 +157,10 @@
       "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-5.fc38.ppc64le"
+      "evra": "0.18.0-1.fc38.ppc64le"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-5.fc38.ppc64le"
+      "evra": "0.18.0-1.fc38.ppc64le"
     },
     "coreutils": {
       "evra": "9.1-12.fc38.ppc64le"
@@ -175,13 +175,13 @@
       "evra": "2.9.11-1.fc38.ppc64le"
     },
     "criu": {
-      "evra": "3.17.1-5.fc38.ppc64le"
+      "evra": "3.18-1.fc38.ppc64le"
     },
     "criu-libs": {
-      "evra": "3.17.1-5.fc38.ppc64le"
+      "evra": "3.18-1.fc38.ppc64le"
     },
     "crun": {
-      "evra": "1.8.7-1.fc38.ppc64le"
+      "evra": "1.9-1.fc38.ppc64le"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -193,7 +193,7 @@
       "evra": "2.6.1-1.fc38.ppc64le"
     },
     "curl": {
-      "evra": "8.0.1-3.fc38.ppc64le"
+      "evra": "8.0.1-4.fc38.ppc64le"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.ppc64le"
@@ -202,16 +202,16 @@
       "evra": "2.1.28-9.fc38.ppc64le"
     },
     "dbus": {
-      "evra": "1:1.14.8-1.fc38.ppc64le"
+      "evra": "1:1.14.10-1.fc38.ppc64le"
     },
     "dbus-broker": {
       "evra": "33-1.fc38.ppc64le"
     },
     "dbus-common": {
-      "evra": "1:1.14.8-1.fc38.noarch"
+      "evra": "1:1.14.10-1.fc38.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.8-1.fc38.ppc64le"
+      "evra": "1:1.14.10-1.fc38.ppc64le"
     },
     "device-mapper": {
       "evra": "1.02.189-2.fc38.ppc64le"
@@ -271,7 +271,7 @@
       "evra": "0.189-3.fc38.ppc64le"
     },
     "ethtool": {
-      "evra": "2:6.4-1.fc38.ppc64le"
+      "evra": "2:6.5-1.fc38.ppc64le"
     },
     "expat": {
       "evra": "2.5.0-2.fc38.ppc64le"
@@ -340,7 +340,7 @@
       "evra": "3.14.1-1.fc38.ppc64le"
     },
     "fwupd": {
-      "evra": "1.9.4-1.fc38.ppc64le"
+      "evra": "1.9.5-1.fc38.ppc64le"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.ppc64le"
@@ -364,19 +364,19 @@
       "evra": "2.41.0-1.fc38.ppc64le"
     },
     "glib2": {
-      "evra": "2.76.5-1.fc38.ppc64le"
+      "evra": "2.76.5-2.fc38.ppc64le"
     },
     "glibc": {
-      "evra": "2.37-4.fc38.ppc64le"
+      "evra": "2.37-5.fc38.ppc64le"
     },
     "glibc-common": {
-      "evra": "2.37-4.fc38.ppc64le"
+      "evra": "2.37-5.fc38.ppc64le"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-4.fc38.ppc64le"
+      "evra": "2.37-5.fc38.ppc64le"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-4.fc38.ppc64le"
+      "evra": "2.37-5.fc38.ppc64le"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.ppc64le"
@@ -394,19 +394,22 @@
       "evra": "3.8-3.fc38.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-97.fc38.noarch"
+      "evra": "1:2.06-98.fc38.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-97.fc38.ppc64le"
+      "evra": "1:2.06-98.fc38.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-97.fc38.noarch"
+      "evra": "1:2.06-98.fc38.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-97.fc38.ppc64le"
+      "evra": "1:2.06-98.fc38.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-97.fc38.ppc64le"
+      "evra": "1:2.06-98.fc38.ppc64le"
+    },
+    "gvisor-tap-vsock-gvforwarder": {
+      "evra": "6:0.7.0-6.fc38.ppc64le"
     },
     "gzip": {
       "evra": "1.12-3.fc38.ppc64le"
@@ -427,10 +430,10 @@
       "evra": "1.0.3-1.fc38.ppc64le"
     },
     "iproute": {
-      "evra": "6.1.0-1.fc38.ppc64le"
+      "evra": "6.4.0-1.fc38.ppc64le"
     },
     "iproute-tc": {
-      "evra": "6.1.0-1.fc38.ppc64le"
+      "evra": "6.4.0-1.fc38.ppc64le"
     },
     "iptables-legacy": {
       "evra": "1.8.9-4.fc38.ppc64le"
@@ -493,16 +496,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.12-200.fc38.ppc64le"
+      "evra": "6.4.15-200.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.4.12-200.fc38.ppc64le"
+      "evra": "6.4.15-200.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.4.12-200.fc38.ppc64le"
+      "evra": "6.4.15-200.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.4.12-200.fc38.ppc64le"
+      "evra": "6.4.15-200.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -565,7 +568,7 @@
       "evra": "2.48-6.fc38.ppc64le"
     },
     "libcap-ng": {
-      "evra": "0.8.3-5.fc38.ppc64le"
+      "evra": "0.8.3-8.fc38.ppc64le"
     },
     "libcbor": {
       "evra": "0.7.0-9.fc38.ppc64le"
@@ -577,7 +580,7 @@
       "evra": "1.46.5-4.fc38.ppc64le"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-3.fc38.ppc64le"
+      "evra": "8.0.1-4.fc38.ppc64le"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.ppc64le"
@@ -841,7 +844,7 @@
       "evra": "2.10.4-1.fc38.ppc64le"
     },
     "libxmlb": {
-      "evra": "0.3.12-1.fc38.ppc64le"
+      "evra": "0.3.14-1.fc38.ppc64le"
     },
     "libyaml": {
       "evra": "0.2.5-9.fc38.ppc64le"
@@ -931,7 +934,7 @@
       "evra": "1:1.0.5-2.fc38.ppc64le"
     },
     "nmstate": {
-      "evra": "2.2.13-2.fc38.ppc64le"
+      "evra": "2.2.15-1.fc38.ppc64le"
     },
     "npth": {
       "evra": "1.6-12.fc38.ppc64le"
@@ -994,10 +997,10 @@
       "evra": "1.5.2-16.fc38.ppc64le"
     },
     "passt": {
-      "evra": "0^20230823.ga7e4bfb-1.fc38.ppc64le"
+      "evra": "0^20230908.g05627dc-1.fc38.ppc64le"
     },
     "passt-selinux": {
-      "evra": "0^20230823.ga7e4bfb-1.fc38.noarch"
+      "evra": "0^20230908.g05627dc-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.ppc64le"
@@ -1021,10 +1024,10 @@
       "evra": "1.8.0-6.fc38.ppc64le"
     },
     "podman": {
-      "evra": "5:4.6.2-1.fc38.ppc64le"
+      "evra": "5:4.6.2-3.fc38.ppc64le"
     },
     "podman-plugins": {
-      "evra": "5:4.6.2-1.fc38.ppc64le"
+      "evra": "5:4.6.2-3.fc38.ppc64le"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.ppc64le"
@@ -1078,10 +1081,10 @@
       "evra": "4.18.1-3.fc38.ppc64le"
     },
     "rpm-ostree": {
-      "evra": "2023.5-1.fc38.ppc64le"
+      "evra": "2023.7-1.fc38.ppc64le"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.5-1.fc38.ppc64le"
+      "evra": "2023.7-1.fc38.ppc64le"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.ppc64le"
@@ -1093,7 +1096,7 @@
       "evra": "3.2.7-2.fc38.ppc64le"
     },
     "runc": {
-      "evra": "2:1.1.7-1.fc38.ppc64le"
+      "evra": "2:1.1.8-1.fc38.ppc64le"
     },
     "samba-client-libs": {
       "evra": "2:4.18.6-1.fc38.ppc64le"
@@ -1108,10 +1111,10 @@
       "evra": "4.8-12.fc38.ppc64le"
     },
     "selinux-policy": {
-      "evra": "38.25-1.fc38.noarch"
+      "evra": "38.27-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.25-1.fc38.noarch"
+      "evra": "38.27-1.fc38.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-3.fc38.ppc64le"
@@ -1135,7 +1138,7 @@
       "evra": "2.2-3.fc38.ppc64le"
     },
     "skopeo": {
-      "evra": "1:1.13.2-1.fc38.ppc64le"
+      "evra": "1:1.13.3-1.fc38.ppc64le"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.ppc64le"
@@ -1192,22 +1195,22 @@
       "evra": "1.9.13-2.p2.fc38.ppc64le"
     },
     "systemd": {
-      "evra": "253.7-1.fc38.ppc64le"
+      "evra": "253.9-1.fc38.ppc64le"
     },
     "systemd-container": {
-      "evra": "253.7-1.fc38.ppc64le"
+      "evra": "253.9-1.fc38.ppc64le"
     },
     "systemd-libs": {
-      "evra": "253.7-1.fc38.ppc64le"
+      "evra": "253.9-1.fc38.ppc64le"
     },
     "systemd-pam": {
-      "evra": "253.7-1.fc38.ppc64le"
+      "evra": "253.9-1.fc38.ppc64le"
     },
     "systemd-resolved": {
-      "evra": "253.7-1.fc38.ppc64le"
+      "evra": "253.9-1.fc38.ppc64le"
     },
     "systemd-udev": {
-      "evra": "253.7-1.fc38.ppc64le"
+      "evra": "253.9-1.fc38.ppc64le"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.ppc64le"
@@ -1237,10 +1240,10 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1712-1.fc38.noarch"
+      "evra": "2:9.0.1872-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1712-1.fc38.ppc64le"
+      "evra": "2:9.0.1872-1.fc38.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc38.ppc64le"
@@ -1280,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-02T00:00:00Z",
+    "generated": "2023-09-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-01T22:29:56Z"
+        "generated": "2023-09-17T00:25:48Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-02T01:04:01Z"
+        "generated": "2023-09-18T01:16:39Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index d4a5998570..26ecd9e102 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -82,7 +82,7 @@
       "evra": "3.6.1-4.fc38.s390x"
     },
     "btrfs-progs": {
-      "evra": "6.3.3-1.fc38.s390x"
+      "evra": "6.5.1-1.fc38.s390x"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.s390x"
@@ -121,7 +121,7 @@
       "evra": "19-2.fc38.s390x"
     },
     "cloud-utils-growpart": {
-      "evra": "0.31-12.fc38.noarch"
+      "evra": "0.33-3.fc38.noarch"
     },
     "conmon": {
       "evra": "2:2.1.7-2.fc38.s390x"
@@ -154,10 +154,10 @@
       "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-5.fc38.s390x"
+      "evra": "0.18.0-1.fc38.s390x"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-5.fc38.s390x"
+      "evra": "0.18.0-1.fc38.s390x"
     },
     "coreutils": {
       "evra": "9.1-12.fc38.s390x"
@@ -172,13 +172,13 @@
       "evra": "2.9.11-1.fc38.s390x"
     },
     "criu": {
-      "evra": "3.17.1-5.fc38.s390x"
+      "evra": "3.18-1.fc38.s390x"
     },
     "criu-libs": {
-      "evra": "3.17.1-5.fc38.s390x"
+      "evra": "3.18-1.fc38.s390x"
     },
     "crun": {
-      "evra": "1.8.7-1.fc38.s390x"
+      "evra": "1.9-1.fc38.s390x"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -190,7 +190,7 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "curl": {
-      "evra": "8.0.1-3.fc38.s390x"
+      "evra": "8.0.1-4.fc38.s390x"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.s390x"
@@ -199,16 +199,16 @@
       "evra": "2.1.28-9.fc38.s390x"
     },
     "dbus": {
-      "evra": "1:1.14.8-1.fc38.s390x"
+      "evra": "1:1.14.10-1.fc38.s390x"
     },
     "dbus-broker": {
       "evra": "33-1.fc38.s390x"
     },
     "dbus-common": {
-      "evra": "1:1.14.8-1.fc38.noarch"
+      "evra": "1:1.14.10-1.fc38.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.8-1.fc38.s390x"
+      "evra": "1:1.14.10-1.fc38.s390x"
     },
     "device-mapper": {
       "evra": "1.02.189-2.fc38.s390x"
@@ -268,7 +268,7 @@
       "evra": "0.189-3.fc38.s390x"
     },
     "ethtool": {
-      "evra": "2:6.4-1.fc38.s390x"
+      "evra": "2:6.5-1.fc38.s390x"
     },
     "expat": {
       "evra": "2.5.0-2.fc38.s390x"
@@ -337,7 +337,7 @@
       "evra": "3.14.1-1.fc38.s390x"
     },
     "fwupd": {
-      "evra": "1.9.4-1.fc38.s390x"
+      "evra": "1.9.5-1.fc38.s390x"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.s390x"
@@ -352,19 +352,19 @@
       "evra": "2.41.0-1.fc38.s390x"
     },
     "glib2": {
-      "evra": "2.76.5-1.fc38.s390x"
+      "evra": "2.76.5-2.fc38.s390x"
     },
     "glibc": {
-      "evra": "2.37-4.fc38.s390x"
+      "evra": "2.37-5.fc38.s390x"
     },
     "glibc-common": {
-      "evra": "2.37-4.fc38.s390x"
+      "evra": "2.37-5.fc38.s390x"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-4.fc38.s390x"
+      "evra": "2.37-5.fc38.s390x"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-4.fc38.s390x"
+      "evra": "2.37-5.fc38.s390x"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.s390x"
@@ -381,6 +381,9 @@
     "grep": {
       "evra": "3.8-3.fc38.s390x"
     },
+    "gvisor-tap-vsock-gvforwarder": {
+      "evra": "6:0.7.0-6.fc38.s390x"
+    },
     "gzip": {
       "evra": "1.12-3.fc38.s390x"
     },
@@ -400,10 +403,10 @@
       "evra": "1.0.3-1.fc38.s390x"
     },
     "iproute": {
-      "evra": "6.1.0-1.fc38.s390x"
+      "evra": "6.4.0-1.fc38.s390x"
     },
     "iproute-tc": {
-      "evra": "6.1.0-1.fc38.s390x"
+      "evra": "6.4.0-1.fc38.s390x"
     },
     "iptables-legacy": {
       "evra": "1.8.9-4.fc38.s390x"
@@ -463,16 +466,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.12-200.fc38.s390x"
+      "evra": "6.4.15-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.4.12-200.fc38.s390x"
+      "evra": "6.4.15-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.4.12-200.fc38.s390x"
+      "evra": "6.4.15-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.4.12-200.fc38.s390x"
+      "evra": "6.4.15-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -535,7 +538,7 @@
       "evra": "2.48-6.fc38.s390x"
     },
     "libcap-ng": {
-      "evra": "0.8.3-5.fc38.s390x"
+      "evra": "0.8.3-8.fc38.s390x"
     },
     "libcbor": {
       "evra": "0.7.0-9.fc38.s390x"
@@ -547,7 +550,7 @@
       "evra": "1.46.5-4.fc38.s390x"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-3.fc38.s390x"
+      "evra": "8.0.1-4.fc38.s390x"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.s390x"
@@ -805,7 +808,7 @@
       "evra": "2.10.4-1.fc38.s390x"
     },
     "libxmlb": {
-      "evra": "0.3.12-1.fc38.s390x"
+      "evra": "0.3.14-1.fc38.s390x"
     },
     "libyaml": {
       "evra": "0.2.5-9.fc38.s390x"
@@ -895,7 +898,7 @@
       "evra": "1:1.0.5-2.fc38.s390x"
     },
     "nmstate": {
-      "evra": "2.2.13-2.fc38.s390x"
+      "evra": "2.2.15-1.fc38.s390x"
     },
     "npth": {
       "evra": "1.6-12.fc38.s390x"
@@ -949,10 +952,10 @@
       "evra": "1.5.2-16.fc38.s390x"
     },
     "passt": {
-      "evra": "0^20230823.ga7e4bfb-1.fc38.s390x"
+      "evra": "0^20230908.g05627dc-1.fc38.s390x"
     },
     "passt-selinux": {
-      "evra": "0^20230823.ga7e4bfb-1.fc38.noarch"
+      "evra": "0^20230908.g05627dc-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.s390x"
@@ -976,10 +979,10 @@
       "evra": "1.8.0-6.fc38.s390x"
     },
     "podman": {
-      "evra": "5:4.6.2-1.fc38.s390x"
+      "evra": "5:4.6.2-3.fc38.s390x"
     },
     "podman-plugins": {
-      "evra": "5:4.6.2-1.fc38.s390x"
+      "evra": "5:4.6.2-3.fc38.s390x"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.s390x"
@@ -1027,10 +1030,10 @@
       "evra": "4.18.1-3.fc38.s390x"
     },
     "rpm-ostree": {
-      "evra": "2023.5-1.fc38.s390x"
+      "evra": "2023.7-1.fc38.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.5-1.fc38.s390x"
+      "evra": "2023.7-1.fc38.s390x"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.s390x"
@@ -1042,7 +1045,7 @@
       "evra": "3.2.7-2.fc38.s390x"
     },
     "runc": {
-      "evra": "2:1.1.7-1.fc38.s390x"
+      "evra": "2:1.1.8-1.fc38.s390x"
     },
     "s390utils-core": {
       "evra": "2:2.25.0-4.fc38.s390x"
@@ -1060,10 +1063,10 @@
       "evra": "4.8-12.fc38.s390x"
     },
     "selinux-policy": {
-      "evra": "38.25-1.fc38.noarch"
+      "evra": "38.27-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.25-1.fc38.noarch"
+      "evra": "38.27-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1084,7 +1087,7 @@
       "evra": "2.2-3.fc38.s390x"
     },
     "skopeo": {
-      "evra": "1:1.13.2-1.fc38.s390x"
+      "evra": "1:1.13.3-1.fc38.s390x"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.s390x"
@@ -1141,22 +1144,22 @@
       "evra": "1.9.13-2.p2.fc38.s390x"
     },
     "systemd": {
-      "evra": "253.7-1.fc38.s390x"
+      "evra": "253.9-1.fc38.s390x"
     },
     "systemd-container": {
-      "evra": "253.7-1.fc38.s390x"
+      "evra": "253.9-1.fc38.s390x"
     },
     "systemd-libs": {
-      "evra": "253.7-1.fc38.s390x"
+      "evra": "253.9-1.fc38.s390x"
     },
     "systemd-pam": {
-      "evra": "253.7-1.fc38.s390x"
+      "evra": "253.9-1.fc38.s390x"
     },
     "systemd-resolved": {
-      "evra": "253.7-1.fc38.s390x"
+      "evra": "253.9-1.fc38.s390x"
     },
     "systemd-udev": {
-      "evra": "253.7-1.fc38.s390x"
+      "evra": "253.9-1.fc38.s390x"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.s390x"
@@ -1189,10 +1192,10 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1712-1.fc38.noarch"
+      "evra": "2:9.0.1872-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1712-1.fc38.s390x"
+      "evra": "2:9.0.1872-1.fc38.s390x"
     },
     "which": {
       "evra": "2.21-39.fc38.s390x"
@@ -1232,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-02T00:00:00Z",
+    "generated": "2023-09-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-01T22:29:03Z"
+        "generated": "2023-09-17T00:26:19Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-02T01:04:08Z"
+        "generated": "2023-09-18T01:16:47Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 6913b6f406..dbc582b760 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -85,7 +85,7 @@
       "evra": "3.6.1-4.fc38.x86_64"
     },
     "btrfs-progs": {
-      "evra": "6.3.3-1.fc38.x86_64"
+      "evra": "6.5.1-1.fc38.x86_64"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.x86_64"
@@ -124,7 +124,7 @@
       "evra": "19-2.fc38.x86_64"
     },
     "cloud-utils-growpart": {
-      "evra": "0.31-12.fc38.noarch"
+      "evra": "0.33-3.fc38.noarch"
     },
     "conmon": {
       "evra": "2:2.1.7-2.fc38.x86_64"
@@ -157,10 +157,10 @@
       "evra": "4:1-89.fc38.noarch"
     },
     "coreos-installer": {
-      "evra": "0.17.0-5.fc38.x86_64"
+      "evra": "0.18.0-1.fc38.x86_64"
     },
     "coreos-installer-bootinfra": {
-      "evra": "0.17.0-5.fc38.x86_64"
+      "evra": "0.18.0-1.fc38.x86_64"
     },
     "coreutils": {
       "evra": "9.1-12.fc38.x86_64"
@@ -175,13 +175,13 @@
       "evra": "2.9.11-1.fc38.x86_64"
     },
     "criu": {
-      "evra": "3.17.1-5.fc38.x86_64"
+      "evra": "3.18-1.fc38.x86_64"
     },
     "criu-libs": {
-      "evra": "3.17.1-5.fc38.x86_64"
+      "evra": "3.18-1.fc38.x86_64"
     },
     "crun": {
-      "evra": "1.8.7-1.fc38.x86_64"
+      "evra": "1.9-1.fc38.x86_64"
     },
     "crypto-policies": {
       "evra": "20230301-1.gita12f7b2.fc38.noarch"
@@ -193,7 +193,7 @@
       "evra": "2.6.1-1.fc38.x86_64"
     },
     "curl": {
-      "evra": "8.0.1-3.fc38.x86_64"
+      "evra": "8.0.1-4.fc38.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.x86_64"
@@ -202,16 +202,16 @@
       "evra": "2.1.28-9.fc38.x86_64"
     },
     "dbus": {
-      "evra": "1:1.14.8-1.fc38.x86_64"
+      "evra": "1:1.14.10-1.fc38.x86_64"
     },
     "dbus-broker": {
       "evra": "33-1.fc38.x86_64"
     },
     "dbus-common": {
-      "evra": "1:1.14.8-1.fc38.noarch"
+      "evra": "1:1.14.10-1.fc38.noarch"
     },
     "dbus-libs": {
-      "evra": "1:1.14.8-1.fc38.x86_64"
+      "evra": "1:1.14.10-1.fc38.x86_64"
     },
     "device-mapper": {
       "evra": "1.02.189-2.fc38.x86_64"
@@ -280,7 +280,7 @@
       "evra": "0.189-3.fc38.x86_64"
     },
     "ethtool": {
-      "evra": "2:6.4-1.fc38.x86_64"
+      "evra": "2:6.5-1.fc38.x86_64"
     },
     "expat": {
       "evra": "2.5.0-2.fc38.x86_64"
@@ -349,7 +349,7 @@
       "evra": "3.14.1-1.fc38.x86_64"
     },
     "fwupd": {
-      "evra": "1.9.4-1.fc38.x86_64"
+      "evra": "1.9.5-1.fc38.x86_64"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.x86_64"
@@ -373,19 +373,19 @@
       "evra": "2.41.0-1.fc38.x86_64"
     },
     "glib2": {
-      "evra": "2.76.5-1.fc38.x86_64"
+      "evra": "2.76.5-2.fc38.x86_64"
     },
     "glibc": {
-      "evra": "2.37-4.fc38.x86_64"
+      "evra": "2.37-5.fc38.x86_64"
     },
     "glibc-common": {
-      "evra": "2.37-4.fc38.x86_64"
+      "evra": "2.37-5.fc38.x86_64"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-4.fc38.x86_64"
+      "evra": "2.37-5.fc38.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-4.fc38.x86_64"
+      "evra": "2.37-5.fc38.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.x86_64"
@@ -406,22 +406,25 @@
       "evra": "3.8-3.fc38.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-97.fc38.noarch"
+      "evra": "1:2.06-98.fc38.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-97.fc38.x86_64"
+      "evra": "1:2.06-98.fc38.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-97.fc38.x86_64"
+      "evra": "1:2.06-98.fc38.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-97.fc38.noarch"
+      "evra": "1:2.06-98.fc38.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-97.fc38.x86_64"
+      "evra": "1:2.06-98.fc38.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-97.fc38.x86_64"
+      "evra": "1:2.06-98.fc38.x86_64"
+    },
+    "gvisor-tap-vsock-gvforwarder": {
+      "evra": "6:0.7.0-6.fc38.x86_64"
     },
     "gzip": {
       "evra": "1.12-3.fc38.x86_64"
@@ -442,10 +445,10 @@
       "evra": "1.0.3-1.fc38.x86_64"
     },
     "iproute": {
-      "evra": "6.1.0-1.fc38.x86_64"
+      "evra": "6.4.0-1.fc38.x86_64"
     },
     "iproute-tc": {
-      "evra": "6.1.0-1.fc38.x86_64"
+      "evra": "6.4.0-1.fc38.x86_64"
     },
     "iptables-legacy": {
       "evra": "1.8.9-4.fc38.x86_64"
@@ -508,16 +511,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.4.12-200.fc38.x86_64"
+      "evra": "6.4.15-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.4.12-200.fc38.x86_64"
+      "evra": "6.4.15-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.4.12-200.fc38.x86_64"
+      "evra": "6.4.15-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.4.12-200.fc38.x86_64"
+      "evra": "6.4.15-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -577,7 +580,7 @@
       "evra": "2.48-6.fc38.x86_64"
     },
     "libcap-ng": {
-      "evra": "0.8.3-5.fc38.x86_64"
+      "evra": "0.8.3-8.fc38.x86_64"
     },
     "libcbor": {
       "evra": "0.7.0-9.fc38.x86_64"
@@ -589,7 +592,7 @@
       "evra": "1.46.5-4.fc38.x86_64"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-3.fc38.x86_64"
+      "evra": "8.0.1-4.fc38.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.x86_64"
@@ -847,7 +850,7 @@
       "evra": "2.10.4-1.fc38.x86_64"
     },
     "libxmlb": {
-      "evra": "0.3.12-1.fc38.x86_64"
+      "evra": "0.3.14-1.fc38.x86_64"
     },
     "libyaml": {
       "evra": "0.2.5-9.fc38.x86_64"
@@ -943,7 +946,7 @@
       "evra": "1:1.0.5-2.fc38.x86_64"
     },
     "nmstate": {
-      "evra": "2.2.13-2.fc38.x86_64"
+      "evra": "2.2.15-1.fc38.x86_64"
     },
     "npth": {
       "evra": "1.6-12.fc38.x86_64"
@@ -1003,10 +1006,10 @@
       "evra": "1.5.2-16.fc38.x86_64"
     },
     "passt": {
-      "evra": "0^20230823.ga7e4bfb-1.fc38.x86_64"
+      "evra": "0^20230908.g05627dc-1.fc38.x86_64"
     },
     "passt-selinux": {
-      "evra": "0^20230823.ga7e4bfb-1.fc38.noarch"
+      "evra": "0^20230908.g05627dc-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.x86_64"
@@ -1030,10 +1033,10 @@
       "evra": "1.8.0-6.fc38.x86_64"
     },
     "podman": {
-      "evra": "5:4.6.2-1.fc38.x86_64"
+      "evra": "5:4.6.2-3.fc38.x86_64"
     },
     "podman-plugins": {
-      "evra": "5:4.6.2-1.fc38.x86_64"
+      "evra": "5:4.6.2-3.fc38.x86_64"
     },
     "policycoreutils": {
       "evra": "3.5-1.fc38.x86_64"
@@ -1078,10 +1081,10 @@
       "evra": "4.18.1-3.fc38.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2023.5-1.fc38.x86_64"
+      "evra": "2023.7-1.fc38.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.5-1.fc38.x86_64"
+      "evra": "2023.7-1.fc38.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.x86_64"
@@ -1093,7 +1096,7 @@
       "evra": "3.2.7-2.fc38.x86_64"
     },
     "runc": {
-      "evra": "2:1.1.7-1.fc38.x86_64"
+      "evra": "2:1.1.8-1.fc38.x86_64"
     },
     "samba-client-libs": {
       "evra": "2:4.18.6-1.fc38.x86_64"
@@ -1108,10 +1111,10 @@
       "evra": "4.8-12.fc38.x86_64"
     },
     "selinux-policy": {
-      "evra": "38.25-1.fc38.noarch"
+      "evra": "38.27-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.25-1.fc38.noarch"
+      "evra": "38.27-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1135,7 +1138,7 @@
       "evra": "15.6-2.x86_64"
     },
     "skopeo": {
-      "evra": "1:1.13.2-1.fc38.x86_64"
+      "evra": "1:1.13.3-1.fc38.x86_64"
     },
     "slang": {
       "evra": "2.3.3-3.fc38.x86_64"
@@ -1192,22 +1195,22 @@
       "evra": "1.9.13-2.p2.fc38.x86_64"
     },
     "systemd": {
-      "evra": "253.7-1.fc38.x86_64"
+      "evra": "253.9-1.fc38.x86_64"
     },
     "systemd-container": {
-      "evra": "253.7-1.fc38.x86_64"
+      "evra": "253.9-1.fc38.x86_64"
     },
     "systemd-libs": {
-      "evra": "253.7-1.fc38.x86_64"
+      "evra": "253.9-1.fc38.x86_64"
     },
     "systemd-pam": {
-      "evra": "253.7-1.fc38.x86_64"
+      "evra": "253.9-1.fc38.x86_64"
     },
     "systemd-resolved": {
-      "evra": "253.7-1.fc38.x86_64"
+      "evra": "253.9-1.fc38.x86_64"
     },
     "systemd-udev": {
-      "evra": "253.7-1.fc38.x86_64"
+      "evra": "253.9-1.fc38.x86_64"
     },
     "tar": {
       "evra": "2:1.34-8.fc38.x86_64"
@@ -1237,10 +1240,10 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1712-1.fc38.noarch"
+      "evra": "2:9.0.1872-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1712-1.fc38.x86_64"
+      "evra": "2:9.0.1872-1.fc38.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc38.x86_64"
@@ -1280,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-09-02T00:00:00Z",
+    "generated": "2023-09-18T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-09-01T22:30:01Z"
+        "generated": "2023-09-17T00:26:48Z"
       },
       "fedora-updates": {
-        "generated": "2023-09-02T01:04:16Z"
+        "generated": "2023-09-18T01:16:55Z"
       }
     }
   }
diff --git a/manifests/audit.yaml b/manifests/audit.yaml
new file mode 100644
index 0000000000..048d846d4c
--- /dev/null
+++ b/manifests/audit.yaml
@@ -0,0 +1,6 @@
+# https://github.com/coreos/fedora-coreos-tracker/issues/1362
+# Merge with manifests/system-configuration.yaml once Fedora 39 is released to
+# all streams
+packages:
+  # Manage and load rules in the audit subsystem in the kernel
+  - audit
diff --git a/manifests/fedora-coreos-base.yaml b/manifests/fedora-coreos-base.yaml
index eec7561aef..d48601af17 100644
--- a/manifests/fedora-coreos-base.yaml
+++ b/manifests/fedora-coreos-base.yaml
@@ -158,6 +158,8 @@ packages:
   - iptables-legacy
   # GPU Firmware files (not broken out into subpackage of linux-firmware in RHEL yet)
   - amd-gpu-firmware intel-gpu-firmware nvidia-gpu-firmware
+  # Wifi/BT firmware files https://github.com/coreos/fedora-coreos-tracker/issues/1575
+  - atheros-firmware brcmfmac-firmware mt7xxx-firmware realtek-firmware
 
 
 # - irqbalance
diff --git a/manifests/fedora-coreos.yaml b/manifests/fedora-coreos.yaml
index 59217fc705..16cccb8fdb 100644
--- a/manifests/fedora-coreos.yaml
+++ b/manifests/fedora-coreos.yaml
@@ -51,6 +51,11 @@ conditional-include:
     # Merge with overlay.d/15fcos/usr/lib/systemd/system-preset/45-fcos.preset
     # once Fedora 39 is released to all streams
     include: enable-fwupd-refresh-timer.yaml
+  - if: releasever >= 39
+    # https://github.com/coreos/fedora-coreos-tracker/issues/1362
+    # Merge with manifests/system-configuration.yaml once Fedora 39 is released
+    # to all streams
+    include: audit.yaml
 
 ostree-layers:
   - overlay/15fcos
@@ -181,6 +186,8 @@ exclude-packages:
   # Let's make sure initscripts doesn't get pulled back in
   # https://github.com/coreos/fedora-coreos-tracker/issues/220#issuecomment-611566254
   - initscripts
+  # nor /usr/sbin/service
+  - initscripts-service
   # For (datacenter/cloud oriented) servers, we want to see the details by default.
   # https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/HSMISZ3ETWQ4ETVLWZQJ55ARZT27AAV3/
   - plymouth
diff --git a/tests/kola/platforms/aws/assert-xen b/tests/kola/platforms/aws/assert-xen
index 3fe55e1150..cb2bdba084 100755
--- a/tests/kola/platforms/aws/assert-xen
+++ b/tests/kola/platforms/aws/assert-xen
@@ -16,7 +16,8 @@ set -xeuo pipefail
 # shellcheck disable=SC1091
 . "$KOLA_EXT_DATA/commonlib.sh"
 
-hypervisor=$(curl http://169.254.169.254/2022-09-24/meta-data/system || true)
+token=$(curl -X PUT "http://169.254.169.254/latest/api/token" -H "X-aws-ec2-metadata-token-ttl-seconds: 21600")
+hypervisor=$(curl -H "X-aws-ec2-metadata-token: $token" http://169.254.169.254/2022-09-24/meta-data/system || true)
 if [ "${hypervisor}" != "xen" ]; then
     fatal "expected xen instance type"
 fi
diff --git a/tests/kola/secex/ensure/test.sh b/tests/kola/secex/ensure/test.sh
index 54191e07b7..eefd01a444 100755
--- a/tests/kola/secex/ensure/test.sh
+++ b/tests/kola/secex/ensure/test.sh
@@ -3,7 +3,7 @@
 ##   architectures: s390x
 ##   platforms: qemu
 ##   requiredTag: secex
-##   timeoutMin: 3
+##   timeoutMin: 5
 ##   description: Verify the s390x Secure Execution QEMU image works. It also
 ##     implicitly tests Ignition config decryption.
 
diff --git a/tests/kola/secex/reboot/test.sh b/tests/kola/secex/reboot/test.sh
index c5dcb18adc..a4e64c03de 100755
--- a/tests/kola/secex/reboot/test.sh
+++ b/tests/kola/secex/reboot/test.sh
@@ -3,7 +3,7 @@
 ##   architectures: s390x
 ##   platforms: qemu
 ##   requiredTag: secex
-##   timeoutMin: 3
+##   timeoutMin: 5
 ##   description: Verify the qemu-secex image reboots with SE enabled. It also
 ##     implicitly tests Ignition config decryption.