diff --git a/fedora-rawhide.repo b/fedora-rawhide.repo
index 2d21e543d0..674eea3332 100644
--- a/fedora-rawhide.repo
+++ b/fedora-rawhide.repo
@@ -14,25 +14,3 @@ type=rpm
 gpgcheck=1
 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
 skip_if_unavailable=False
-excludepkgs=kernel kernel-core kernel-modules kernel-modules-core
-
-# We are choosing to use only nodebug kernels in Fedora CoreOS
-# for our testing. We've seen too many issues where an issue either
-# shows up only on the debug kernels OR a debug kernel gives us a
-# false positive or negative when trying to root cause a failure.
-# Thus we use the nodebug kernel repo [1] and includepkgs=kernel
-# here and excludepkgs=kernel above.
-#
-# [1] https://fedoraproject.org/wiki/RawhideKernelNodebug
-[fedora-rawhide-nodebug-kernel]
-name=nodebug kernels for Rawhide
-baseurl=https://dl.fedoraproject.org/pub/alt/rawhide-kernel-nodebug/$basearch/
-enabled=1
-countme=1
-metadata_expire=6h
-repo_gpgcheck=0
-type=rpm
-gpgcheck=0
-gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
-skip_if_unavailable=False
-includepkgs=kernel kernel-core kernel-modules kernel-modules-core
diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 042ff64777..f6b960afa2 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -34,8 +34,3 @@
   # snooze: 2023-04-12 (disabled on promotion)
   arches:
     - aarch64
-  streams:
-    - rawhide
-    - branched
-    - next-devel
-    - next
diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 9285c04d72..da275c4ca3 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -16,7 +16,7 @@
       "evra": "1:1.42.0-1.fc38.aarch64"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.8.0.11-2.fc38.noarch"
+      "evra": "2.9.0.4-1.fc38.noarch"
     },
     "aardvark-dns": {
       "evra": "1.5.0-4.fc38.aarch64"
@@ -28,13 +28,13 @@
       "evra": "0.9.2-2.fc38.aarch64"
     },
     "afterburn": {
-      "evra": "5.4.0-1.fc38.aarch64"
+      "evra": "5.4.0-2.fc38.aarch64"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-1.fc38.aarch64"
+      "evra": "5.4.0-2.fc38.aarch64"
     },
     "alternatives": {
-      "evra": "1.21-2.fc38.aarch64"
+      "evra": "1.22-1.fc38.aarch64"
     },
     "amd-gpu-firmware": {
       "evra": "20230310-148.fc38.noarch"
@@ -64,13 +64,13 @@
       "evra": "1:2.11-9.fc38.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.12-1.fc38.aarch64"
+      "evra": "32:9.18.13-1.fc38.aarch64"
     },
     "bind-license": {
-      "evra": "32:9.18.12-1.fc38.noarch"
+      "evra": "32:9.18.13-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.12-1.fc38.aarch64"
+      "evra": "32:9.18.13-1.fc38.aarch64"
     },
     "bootupd": {
       "evra": "0.2.9-1.fc38.aarch64"
@@ -79,7 +79,7 @@
       "evra": "3.6.1-4.fc38.aarch64"
     },
     "btrfs-progs": {
-      "evra": "6.2.1-1.fc38.aarch64"
+      "evra": "6.2.2-1.fc38.aarch64"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.aarch64"
@@ -136,7 +136,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.204.0-1.fc38.noarch"
+      "evra": "2:2.206.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.aarch64"
@@ -187,7 +187,7 @@
       "evra": "2.6.1-1.fc38.aarch64"
     },
     "curl": {
-      "evra": "7.87.0-6.fc38.aarch64"
+      "evra": "7.87.0-7.fc38.aarch64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.aarch64"
@@ -238,13 +238,13 @@
       "evra": "4.2-6.fc38.aarch64"
     },
     "dracut": {
-      "evra": "057-6.fc38.aarch64"
+      "evra": "059-2.fc38.aarch64"
     },
     "dracut-network": {
-      "evra": "057-6.fc38.aarch64"
+      "evra": "059-2.fc38.aarch64"
     },
     "dracut-squash": {
-      "evra": "057-6.fc38.aarch64"
+      "evra": "059-2.fc38.aarch64"
     },
     "duktape": {
       "evra": "2.7.0-2.fc38.aarch64"
@@ -283,13 +283,13 @@
       "evra": "38-0.5.noarch"
     },
     "fedora-release-common": {
-      "evra": "38-0.30.noarch"
+      "evra": "38-0.32.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "38-0.30.noarch"
+      "evra": "38-0.32.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "38-0.30.noarch"
+      "evra": "38-0.32.noarch"
     },
     "fedora-repos": {
       "evra": "38-0.5.noarch"
@@ -367,7 +367,7 @@
       "evra": "2.40.0-1.fc38.aarch64"
     },
     "glib2": {
-      "evra": "2.76.0-1.fc38.aarch64"
+      "evra": "2.76.1-1.fc38.aarch64"
     },
     "glibc": {
       "evra": "2.37-1.fc38.aarch64"
@@ -397,16 +397,16 @@
       "evra": "3.8-3.fc38.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-88.fc38.noarch"
+      "evra": "1:2.06-89.fc38.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-88.fc38.aarch64"
+      "evra": "1:2.06-89.fc38.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-88.fc38.aarch64"
+      "evra": "1:2.06-89.fc38.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-88.fc38.aarch64"
+      "evra": "1:2.06-89.fc38.aarch64"
     },
     "gzip": {
       "evra": "1.12-3.fc38.aarch64"
@@ -490,16 +490,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.7-300.fc38.aarch64"
+      "evra": "6.2.8-300.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.2.7-300.fc38.aarch64"
+      "evra": "6.2.8-300.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.2.7-300.fc38.aarch64"
+      "evra": "6.2.8-300.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.2.7-300.fc38.aarch64"
+      "evra": "6.2.8-300.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -541,7 +541,7 @@
       "evra": "2.5.5-6.fc38.aarch64"
     },
     "libatomic": {
-      "evra": "13.0.1-0.7.fc38.aarch64"
+      "evra": "13.0.1-0.8.fc38.aarch64"
     },
     "libattr": {
       "evra": "2.5.1-6.fc38.aarch64"
@@ -574,7 +574,7 @@
       "evra": "1.46.5-4.fc38.aarch64"
     },
     "libcurl-minimal": {
-      "evra": "7.87.0-6.fc38.aarch64"
+      "evra": "7.87.0-7.fc38.aarch64"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.aarch64"
@@ -607,7 +607,7 @@
       "evra": "1.5-2.fc38.aarch64"
     },
     "libgcc": {
-      "evra": "13.0.1-0.7.fc38.aarch64"
+      "evra": "13.0.1-0.8.fc38.aarch64"
     },
     "libgcrypt": {
       "evra": "1.10.1-7.fc38.aarch64"
@@ -727,7 +727,7 @@
       "evra": "1.15.1-2.fc38.aarch64"
     },
     "libreport-filesystem": {
-      "evra": "2.17.8-1.fc38.noarch"
+      "evra": "2.17.9-1.fc38.noarch"
     },
     "libseccomp": {
       "evra": "2.5.3-4.fc38.aarch64"
@@ -739,7 +739,7 @@
       "evra": "3.5-1.fc38.aarch64"
     },
     "libsemanage": {
-      "evra": "3.5-1.fc38.aarch64"
+      "evra": "3.5-2.fc38.aarch64"
     },
     "libsepol": {
       "evra": "3.5-1.fc38.aarch64"
@@ -754,7 +754,7 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.0-10.fc38.aarch64"
+      "evra": "2:4.18.0-12.fc38.aarch64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.aarch64"
@@ -775,7 +775,7 @@
       "evra": "2.8.2-4.fc38.aarch64"
     },
     "libstdc++": {
-      "evra": "13.0.1-0.7.fc38.aarch64"
+      "evra": "13.0.1-0.8.fc38.aarch64"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.aarch64"
@@ -823,7 +823,7 @@
       "evra": "0.3.2-5.fc38.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.18.0-10.fc38.aarch64"
+      "evra": "2:4.18.0-12.fc38.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.33-7.fc38.aarch64"
@@ -922,7 +922,7 @@
       "evra": "1:1.0.5-2.fc38.aarch64"
     },
     "nmstate": {
-      "evra": "2.2.8-1.fc38.aarch64"
+      "evra": "2.2.9-1.fc38.aarch64"
     },
     "npth": {
       "evra": "1.6-12.fc38.aarch64"
@@ -946,19 +946,19 @@
       "evra": "2.6.4-1.fc38.aarch64"
     },
     "openssh": {
-      "evra": "9.0p1-12.fc38.1.aarch64"
+      "evra": "9.0p1-14.fc38.1.aarch64"
     },
     "openssh-clients": {
-      "evra": "9.0p1-12.fc38.1.aarch64"
+      "evra": "9.0p1-14.fc38.1.aarch64"
     },
     "openssh-server": {
-      "evra": "9.0p1-12.fc38.1.aarch64"
+      "evra": "9.0p1-14.fc38.1.aarch64"
     },
     "openssl": {
-      "evra": "1:3.0.8-1.fc38.aarch64"
+      "evra": "1:3.0.8-2.fc38.aarch64"
     },
     "openssl-libs": {
-      "evra": "1:3.0.8-1.fc38.aarch64"
+      "evra": "1:3.0.8-2.fc38.aarch64"
     },
     "os-prober": {
       "evra": "1.81-3.fc38.aarch64"
@@ -1069,13 +1069,13 @@
       "evra": "2:1.1.4-2.fc38.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.0-10.fc38.aarch64"
+      "evra": "2:4.18.0-12.fc38.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.18.0-10.fc38.noarch"
+      "evra": "2:4.18.0-12.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.0-10.fc38.aarch64"
+      "evra": "2:4.18.0-12.fc38.aarch64"
     },
     "sed": {
       "evra": "4.8-12.fc38.aarch64"
@@ -1096,10 +1096,10 @@
       "evra": "1.46-5.fc38.aarch64"
     },
     "shadow-utils": {
-      "evra": "2:4.13-5.fc38.aarch64"
+      "evra": "2:4.13-6.fc38.aarch64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.13-5.fc38.aarch64"
+      "evra": "2:4.13-6.fc38.aarch64"
     },
     "shared-mime-info": {
       "evra": "2.2-3.fc38.aarch64"
@@ -1165,25 +1165,25 @@
       "evra": "1.9.13-1.p2.fc38.aarch64"
     },
     "systemd": {
-      "evra": "253-6.fc38.aarch64"
+      "evra": "253.2-1.fc38.aarch64"
     },
     "systemd-container": {
-      "evra": "253-6.fc38.aarch64"
+      "evra": "253.2-1.fc38.aarch64"
     },
     "systemd-libs": {
-      "evra": "253-6.fc38.aarch64"
+      "evra": "253.2-1.fc38.aarch64"
     },
     "systemd-pam": {
-      "evra": "253-6.fc38.aarch64"
+      "evra": "253.2-1.fc38.aarch64"
     },
     "systemd-resolved": {
-      "evra": "253-6.fc38.aarch64"
+      "evra": "253.2-1.fc38.aarch64"
     },
     "systemd-udev": {
-      "evra": "253-6.fc38.aarch64"
+      "evra": "253.2-1.fc38.aarch64"
     },
     "tar": {
-      "evra": "2:1.34-7.fc38.aarch64"
+      "evra": "2:1.34-8.fc38.aarch64"
     },
     "teamd": {
       "evra": "1.31-7.fc38.aarch64"
@@ -1210,10 +1210,10 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1407-1.fc38.noarch"
+      "evra": "2:9.0.1429-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1407-1.fc38.aarch64"
+      "evra": "2:9.0.1429-1.fc38.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc38.aarch64"
@@ -1253,13 +1253,13 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-22T00:00:00Z",
+    "generated": "2023-04-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora-coreos-pool": {
-        "generated": "2023-03-21T17:45:31Z"
+        "generated": "2023-04-01T22:32:25Z"
       },
       "fedora-next": {
-        "generated": "2023-03-22T09:33:04Z"
+        "generated": "2023-04-01T17:05:06Z"
       },
       "fedora-next-updates": {
         "generated": "2018-02-20T19:13:29Z"
diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index f2a0fac0dc..55386e6c82 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,13 +9,9 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  coreos-installer:
-    evr: 0.17.0-1.fc38
+  nmstate:
+    evr: 2.2.9-1.fc38
     metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-8c9cfc425e
-      type: fast-track
-  coreos-installer-bootinfra:
-    evr: 0.17.0-1.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-8c9cfc425e
+      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-a226c4298d
+      reason: https://github.com/coreos/coreos-assembler/pull/3397
       type: fast-track
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index 5cb6c2f359..e9eac57ef1 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -16,7 +16,7 @@
       "evra": "1:1.42.0-1.fc38.ppc64le"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.8.0.11-2.fc38.noarch"
+      "evra": "2.9.0.4-1.fc38.noarch"
     },
     "aardvark-dns": {
       "evra": "1.5.0-4.fc38.ppc64le"
@@ -28,13 +28,13 @@
       "evra": "0.9.2-2.fc38.ppc64le"
     },
     "afterburn": {
-      "evra": "5.4.0-1.fc38.ppc64le"
+      "evra": "5.4.0-2.fc38.ppc64le"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-1.fc38.ppc64le"
+      "evra": "5.4.0-2.fc38.ppc64le"
     },
     "alternatives": {
-      "evra": "1.21-2.fc38.ppc64le"
+      "evra": "1.22-1.fc38.ppc64le"
     },
     "amd-gpu-firmware": {
       "evra": "20230310-148.fc38.noarch"
@@ -67,19 +67,19 @@
       "evra": "1.07.1-17.fc38.ppc64le"
     },
     "bind-libs": {
-      "evra": "32:9.18.12-1.fc38.ppc64le"
+      "evra": "32:9.18.13-1.fc38.ppc64le"
     },
     "bind-license": {
-      "evra": "32:9.18.12-1.fc38.noarch"
+      "evra": "32:9.18.13-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.12-1.fc38.ppc64le"
+      "evra": "32:9.18.13-1.fc38.ppc64le"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.ppc64le"
     },
     "btrfs-progs": {
-      "evra": "6.2.1-1.fc38.ppc64le"
+      "evra": "6.2.2-1.fc38.ppc64le"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.ppc64le"
@@ -136,7 +136,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.204.0-1.fc38.noarch"
+      "evra": "2:2.206.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.ppc64le"
@@ -187,7 +187,7 @@
       "evra": "2.6.1-1.fc38.ppc64le"
     },
     "curl": {
-      "evra": "7.87.0-6.fc38.ppc64le"
+      "evra": "7.87.0-7.fc38.ppc64le"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.ppc64le"
@@ -238,13 +238,13 @@
       "evra": "4.2-6.fc38.ppc64le"
     },
     "dracut": {
-      "evra": "057-6.fc38.ppc64le"
+      "evra": "059-2.fc38.ppc64le"
     },
     "dracut-network": {
-      "evra": "057-6.fc38.ppc64le"
+      "evra": "059-2.fc38.ppc64le"
     },
     "dracut-squash": {
-      "evra": "057-6.fc38.ppc64le"
+      "evra": "059-2.fc38.ppc64le"
     },
     "duktape": {
       "evra": "2.7.0-2.fc38.ppc64le"
@@ -274,13 +274,13 @@
       "evra": "38-0.5.noarch"
     },
     "fedora-release-common": {
-      "evra": "38-0.30.noarch"
+      "evra": "38-0.32.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "38-0.30.noarch"
+      "evra": "38-0.32.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "38-0.30.noarch"
+      "evra": "38-0.32.noarch"
     },
     "fedora-repos": {
       "evra": "38-0.5.noarch"
@@ -358,7 +358,7 @@
       "evra": "2.40.0-1.fc38.ppc64le"
     },
     "glib2": {
-      "evra": "2.76.0-1.fc38.ppc64le"
+      "evra": "2.76.1-1.fc38.ppc64le"
     },
     "glibc": {
       "evra": "2.37-1.fc38.ppc64le"
@@ -388,19 +388,19 @@
       "evra": "3.8-3.fc38.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-88.fc38.noarch"
+      "evra": "1:2.06-89.fc38.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-88.fc38.ppc64le"
+      "evra": "1:2.06-89.fc38.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-88.fc38.noarch"
+      "evra": "1:2.06-89.fc38.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-88.fc38.ppc64le"
+      "evra": "1:2.06-89.fc38.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-88.fc38.ppc64le"
+      "evra": "1:2.06-89.fc38.ppc64le"
     },
     "gzip": {
       "evra": "1.12-3.fc38.ppc64le"
@@ -484,16 +484,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.7-300.fc38.ppc64le"
+      "evra": "6.2.8-300.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.2.7-300.fc38.ppc64le"
+      "evra": "6.2.8-300.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.2.7-300.fc38.ppc64le"
+      "evra": "6.2.8-300.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.2.7-300.fc38.ppc64le"
+      "evra": "6.2.8-300.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -535,7 +535,7 @@
       "evra": "2.5.5-6.fc38.ppc64le"
     },
     "libatomic": {
-      "evra": "13.0.1-0.7.fc38.ppc64le"
+      "evra": "13.0.1-0.8.fc38.ppc64le"
     },
     "libattr": {
       "evra": "2.5.1-6.fc38.ppc64le"
@@ -568,7 +568,7 @@
       "evra": "1.46.5-4.fc38.ppc64le"
     },
     "libcurl-minimal": {
-      "evra": "7.87.0-6.fc38.ppc64le"
+      "evra": "7.87.0-7.fc38.ppc64le"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.ppc64le"
@@ -601,7 +601,7 @@
       "evra": "1.5-2.fc38.ppc64le"
     },
     "libgcc": {
-      "evra": "13.0.1-0.7.fc38.ppc64le"
+      "evra": "13.0.1-0.8.fc38.ppc64le"
     },
     "libgcrypt": {
       "evra": "1.10.1-7.fc38.ppc64le"
@@ -721,7 +721,7 @@
       "evra": "1.15.1-2.fc38.ppc64le"
     },
     "libreport-filesystem": {
-      "evra": "2.17.8-1.fc38.noarch"
+      "evra": "2.17.9-1.fc38.noarch"
     },
     "librtas": {
       "evra": "2.0.4-1.fc38.ppc64le"
@@ -736,7 +736,7 @@
       "evra": "3.5-1.fc38.ppc64le"
     },
     "libsemanage": {
-      "evra": "3.5-1.fc38.ppc64le"
+      "evra": "3.5-2.fc38.ppc64le"
     },
     "libsepol": {
       "evra": "3.5-1.fc38.ppc64le"
@@ -754,7 +754,7 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.18.0-10.fc38.ppc64le"
+      "evra": "2:4.18.0-12.fc38.ppc64le"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.ppc64le"
@@ -775,7 +775,7 @@
       "evra": "2.8.2-4.fc38.ppc64le"
     },
     "libstdc++": {
-      "evra": "13.0.1-0.7.fc38.ppc64le"
+      "evra": "13.0.1-0.8.fc38.ppc64le"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.ppc64le"
@@ -823,7 +823,7 @@
       "evra": "0.3.2-5.fc38.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.18.0-10.fc38.ppc64le"
+      "evra": "2:4.18.0-12.fc38.ppc64le"
     },
     "libxcrypt": {
       "evra": "4.4.33-7.fc38.ppc64le"
@@ -919,7 +919,7 @@
       "evra": "1:1.0.5-2.fc38.ppc64le"
     },
     "nmstate": {
-      "evra": "2.2.8-1.fc38.ppc64le"
+      "evra": "2.2.9-1.fc38.ppc64le"
     },
     "npth": {
       "evra": "1.6-12.fc38.ppc64le"
@@ -943,19 +943,19 @@
       "evra": "2.6.4-1.fc38.ppc64le"
     },
     "openssh": {
-      "evra": "9.0p1-12.fc38.1.ppc64le"
+      "evra": "9.0p1-14.fc38.1.ppc64le"
     },
     "openssh-clients": {
-      "evra": "9.0p1-12.fc38.1.ppc64le"
+      "evra": "9.0p1-14.fc38.1.ppc64le"
     },
     "openssh-server": {
-      "evra": "9.0p1-12.fc38.1.ppc64le"
+      "evra": "9.0p1-14.fc38.1.ppc64le"
     },
     "openssl": {
-      "evra": "1:3.0.8-1.fc38.ppc64le"
+      "evra": "1:3.0.8-2.fc38.ppc64le"
     },
     "openssl-libs": {
-      "evra": "1:3.0.8-1.fc38.ppc64le"
+      "evra": "1:3.0.8-2.fc38.ppc64le"
     },
     "os-prober": {
       "evra": "1.81-3.fc38.ppc64le"
@@ -1075,13 +1075,13 @@
       "evra": "2:1.1.4-2.fc38.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.0-10.fc38.ppc64le"
+      "evra": "2:4.18.0-12.fc38.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.18.0-10.fc38.noarch"
+      "evra": "2:4.18.0-12.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.0-10.fc38.ppc64le"
+      "evra": "2:4.18.0-12.fc38.ppc64le"
     },
     "sed": {
       "evra": "4.8-12.fc38.ppc64le"
@@ -1105,10 +1105,10 @@
       "evra": "1.46-5.fc38.ppc64le"
     },
     "shadow-utils": {
-      "evra": "2:4.13-5.fc38.ppc64le"
+      "evra": "2:4.13-6.fc38.ppc64le"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.13-5.fc38.ppc64le"
+      "evra": "2:4.13-6.fc38.ppc64le"
     },
     "shared-mime-info": {
       "evra": "2.2-3.fc38.ppc64le"
@@ -1171,25 +1171,25 @@
       "evra": "1.9.13-1.p2.fc38.ppc64le"
     },
     "systemd": {
-      "evra": "253-6.fc38.ppc64le"
+      "evra": "253.2-1.fc38.ppc64le"
     },
     "systemd-container": {
-      "evra": "253-6.fc38.ppc64le"
+      "evra": "253.2-1.fc38.ppc64le"
     },
     "systemd-libs": {
-      "evra": "253-6.fc38.ppc64le"
+      "evra": "253.2-1.fc38.ppc64le"
     },
     "systemd-pam": {
-      "evra": "253-6.fc38.ppc64le"
+      "evra": "253.2-1.fc38.ppc64le"
     },
     "systemd-resolved": {
-      "evra": "253-6.fc38.ppc64le"
+      "evra": "253.2-1.fc38.ppc64le"
     },
     "systemd-udev": {
-      "evra": "253-6.fc38.ppc64le"
+      "evra": "253.2-1.fc38.ppc64le"
     },
     "tar": {
-      "evra": "2:1.34-7.fc38.ppc64le"
+      "evra": "2:1.34-8.fc38.ppc64le"
     },
     "teamd": {
       "evra": "1.31-7.fc38.ppc64le"
@@ -1216,10 +1216,10 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1407-1.fc38.noarch"
+      "evra": "2:9.0.1429-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1407-1.fc38.ppc64le"
+      "evra": "2:9.0.1429-1.fc38.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc38.ppc64le"
@@ -1259,13 +1259,13 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-22T00:00:00Z",
+    "generated": "2023-04-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora-coreos-pool": {
-        "generated": "2023-03-21T17:45:15Z"
+        "generated": "2023-04-01T22:31:46Z"
       },
       "fedora-next": {
-        "generated": "2023-03-22T09:32:53Z"
+        "generated": "2023-04-01T17:05:02Z"
       },
       "fedora-next-updates": {
         "generated": "2018-02-28T16:06:00Z"
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index e9d36a6f99..5433df4602 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -16,7 +16,7 @@
       "evra": "1:1.42.0-1.fc38.s390x"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.8.0.11-2.fc38.noarch"
+      "evra": "2.9.0.4-1.fc38.noarch"
     },
     "aardvark-dns": {
       "evra": "1.5.0-4.fc38.s390x"
@@ -28,13 +28,13 @@
       "evra": "0.9.2-2.fc38.s390x"
     },
     "afterburn": {
-      "evra": "5.4.0-1.fc38.s390x"
+      "evra": "5.4.0-2.fc38.s390x"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-1.fc38.s390x"
+      "evra": "5.4.0-2.fc38.s390x"
     },
     "alternatives": {
-      "evra": "1.21-2.fc38.s390x"
+      "evra": "1.22-1.fc38.s390x"
     },
     "amd-gpu-firmware": {
       "evra": "20230310-148.fc38.noarch"
@@ -64,19 +64,19 @@
       "evra": "1:2.11-9.fc38.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.12-1.fc38.s390x"
+      "evra": "32:9.18.13-1.fc38.s390x"
     },
     "bind-license": {
-      "evra": "32:9.18.12-1.fc38.noarch"
+      "evra": "32:9.18.13-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.12-1.fc38.s390x"
+      "evra": "32:9.18.13-1.fc38.s390x"
     },
     "bsdtar": {
       "evra": "3.6.1-4.fc38.s390x"
     },
     "btrfs-progs": {
-      "evra": "6.2.1-1.fc38.s390x"
+      "evra": "6.2.2-1.fc38.s390x"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.s390x"
@@ -133,7 +133,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.204.0-1.fc38.noarch"
+      "evra": "2:2.206.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.s390x"
@@ -184,7 +184,7 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "curl": {
-      "evra": "7.87.0-6.fc38.s390x"
+      "evra": "7.87.0-7.fc38.s390x"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.s390x"
@@ -235,13 +235,13 @@
       "evra": "4.2-6.fc38.s390x"
     },
     "dracut": {
-      "evra": "057-6.fc38.s390x"
+      "evra": "059-2.fc38.s390x"
     },
     "dracut-network": {
-      "evra": "057-6.fc38.s390x"
+      "evra": "059-2.fc38.s390x"
     },
     "dracut-squash": {
-      "evra": "057-6.fc38.s390x"
+      "evra": "059-2.fc38.s390x"
     },
     "duktape": {
       "evra": "2.7.0-2.fc38.s390x"
@@ -271,13 +271,13 @@
       "evra": "38-0.5.noarch"
     },
     "fedora-release-common": {
-      "evra": "38-0.30.noarch"
+      "evra": "38-0.32.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "38-0.30.noarch"
+      "evra": "38-0.32.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "38-0.30.noarch"
+      "evra": "38-0.32.noarch"
     },
     "fedora-repos": {
       "evra": "38-0.5.noarch"
@@ -343,7 +343,7 @@
       "evra": "2.40.0-1.fc38.s390x"
     },
     "glib2": {
-      "evra": "2.76.0-1.fc38.s390x"
+      "evra": "2.76.1-1.fc38.s390x"
     },
     "glibc": {
       "evra": "2.37-1.fc38.s390x"
@@ -451,16 +451,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.7-300.fc38.s390x"
+      "evra": "6.2.8-300.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.2.7-300.fc38.s390x"
+      "evra": "6.2.8-300.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.2.7-300.fc38.s390x"
+      "evra": "6.2.8-300.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.2.7-300.fc38.s390x"
+      "evra": "6.2.8-300.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -532,7 +532,7 @@
       "evra": "1.46.5-4.fc38.s390x"
     },
     "libcurl-minimal": {
-      "evra": "7.87.0-6.fc38.s390x"
+      "evra": "7.87.0-7.fc38.s390x"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.s390x"
@@ -562,7 +562,7 @@
       "evra": "1.12.0-3.fc38.s390x"
     },
     "libgcc": {
-      "evra": "13.0.1-0.7.fc38.s390x"
+      "evra": "13.0.1-0.8.fc38.s390x"
     },
     "libgcrypt": {
       "evra": "1.10.1-7.fc38.s390x"
@@ -673,7 +673,7 @@
       "evra": "1.15.1-2.fc38.s390x"
     },
     "libreport-filesystem": {
-      "evra": "2.17.8-1.fc38.noarch"
+      "evra": "2.17.9-1.fc38.noarch"
     },
     "libseccomp": {
       "evra": "2.5.3-4.fc38.s390x"
@@ -685,7 +685,7 @@
       "evra": "3.5-1.fc38.s390x"
     },
     "libsemanage": {
-      "evra": "3.5-1.fc38.s390x"
+      "evra": "3.5-2.fc38.s390x"
     },
     "libsepol": {
       "evra": "3.5-1.fc38.s390x"
@@ -700,7 +700,7 @@
       "evra": "2.38.1-4.fc38.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.18.0-10.fc38.s390x"
+      "evra": "2:4.18.0-12.fc38.s390x"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.s390x"
@@ -721,7 +721,7 @@
       "evra": "2.8.2-4.fc38.s390x"
     },
     "libstdc++": {
-      "evra": "13.0.1-0.7.fc38.s390x"
+      "evra": "13.0.1-0.8.fc38.s390x"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.s390x"
@@ -766,7 +766,7 @@
       "evra": "0.3.2-5.fc38.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.18.0-10.fc38.s390x"
+      "evra": "2:4.18.0-12.fc38.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.33-7.fc38.s390x"
@@ -859,7 +859,7 @@
       "evra": "1:1.0.5-2.fc38.s390x"
     },
     "nmstate": {
-      "evra": "2.2.8-1.fc38.s390x"
+      "evra": "2.2.9-1.fc38.s390x"
     },
     "npth": {
       "evra": "1.6-12.fc38.s390x"
@@ -880,19 +880,19 @@
       "evra": "2.6.4-1.fc38.s390x"
     },
     "openssh": {
-      "evra": "9.0p1-12.fc38.1.s390x"
+      "evra": "9.0p1-14.fc38.1.s390x"
     },
     "openssh-clients": {
-      "evra": "9.0p1-12.fc38.1.s390x"
+      "evra": "9.0p1-14.fc38.1.s390x"
     },
     "openssh-server": {
-      "evra": "9.0p1-12.fc38.1.s390x"
+      "evra": "9.0p1-14.fc38.1.s390x"
     },
     "openssl": {
-      "evra": "1:3.0.8-1.fc38.s390x"
+      "evra": "1:3.0.8-2.fc38.s390x"
     },
     "openssl-libs": {
-      "evra": "1:3.0.8-1.fc38.s390x"
+      "evra": "1:3.0.8-2.fc38.s390x"
     },
     "ostree": {
       "evra": "2023.1-2.fc38.s390x"
@@ -1003,13 +1003,13 @@
       "evra": "2:2.25.0-4.fc38.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.0-10.fc38.s390x"
+      "evra": "2:4.18.0-12.fc38.s390x"
     },
     "samba-common": {
-      "evra": "2:4.18.0-10.fc38.noarch"
+      "evra": "2:4.18.0-12.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.0-10.fc38.s390x"
+      "evra": "2:4.18.0-12.fc38.s390x"
     },
     "sed": {
       "evra": "4.8-12.fc38.s390x"
@@ -1030,10 +1030,10 @@
       "evra": "1.46-5.fc38.s390x"
     },
     "shadow-utils": {
-      "evra": "2:4.13-5.fc38.s390x"
+      "evra": "2:4.13-6.fc38.s390x"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.13-5.fc38.s390x"
+      "evra": "2:4.13-6.fc38.s390x"
     },
     "skopeo": {
       "evra": "1:1.11.1-1.fc38.s390x"
@@ -1093,25 +1093,25 @@
       "evra": "1.9.13-1.p2.fc38.s390x"
     },
     "systemd": {
-      "evra": "253-6.fc38.s390x"
+      "evra": "253.2-1.fc38.s390x"
     },
     "systemd-container": {
-      "evra": "253-6.fc38.s390x"
+      "evra": "253.2-1.fc38.s390x"
     },
     "systemd-libs": {
-      "evra": "253-6.fc38.s390x"
+      "evra": "253.2-1.fc38.s390x"
     },
     "systemd-pam": {
-      "evra": "253-6.fc38.s390x"
+      "evra": "253.2-1.fc38.s390x"
     },
     "systemd-resolved": {
-      "evra": "253-6.fc38.s390x"
+      "evra": "253.2-1.fc38.s390x"
     },
     "systemd-udev": {
-      "evra": "253-6.fc38.s390x"
+      "evra": "253.2-1.fc38.s390x"
     },
     "tar": {
-      "evra": "2:1.34-7.fc38.s390x"
+      "evra": "2:1.34-8.fc38.s390x"
     },
     "teamd": {
       "evra": "1.31-7.fc38.s390x"
@@ -1141,10 +1141,10 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1407-1.fc38.noarch"
+      "evra": "2:9.0.1429-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1407-1.fc38.s390x"
+      "evra": "2:9.0.1429-1.fc38.s390x"
     },
     "which": {
       "evra": "2.21-39.fc38.s390x"
@@ -1184,13 +1184,13 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-22T00:00:00Z",
+    "generated": "2023-04-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora-coreos-pool": {
-        "generated": "2023-03-21T17:45:41Z"
+        "generated": "2023-04-01T22:31:14Z"
       },
       "fedora-next": {
-        "generated": "2023-03-22T09:32:51Z"
+        "generated": "2023-04-01T17:05:00Z"
       },
       "fedora-next-updates": {
         "generated": "2018-02-28T16:06:49Z"
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 583fec2c06..d5b275f7fb 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -16,7 +16,7 @@
       "evra": "1:1.42.0-1.fc38.x86_64"
     },
     "WALinuxAgent-udev": {
-      "evra": "2.8.0.11-2.fc38.noarch"
+      "evra": "2.9.0.4-1.fc38.noarch"
     },
     "aardvark-dns": {
       "evra": "1.5.0-4.fc38.x86_64"
@@ -28,13 +28,13 @@
       "evra": "0.9.2-2.fc38.x86_64"
     },
     "afterburn": {
-      "evra": "5.4.0-1.fc38.x86_64"
+      "evra": "5.4.0-2.fc38.x86_64"
     },
     "afterburn-dracut": {
-      "evra": "5.4.0-1.fc38.x86_64"
+      "evra": "5.4.0-2.fc38.x86_64"
     },
     "alternatives": {
-      "evra": "1.21-2.fc38.x86_64"
+      "evra": "1.22-1.fc38.x86_64"
     },
     "amd-gpu-firmware": {
       "evra": "20230310-148.fc38.noarch"
@@ -64,13 +64,13 @@
       "evra": "1:2.11-9.fc38.noarch"
     },
     "bind-libs": {
-      "evra": "32:9.18.12-1.fc38.x86_64"
+      "evra": "32:9.18.13-1.fc38.x86_64"
     },
     "bind-license": {
-      "evra": "32:9.18.12-1.fc38.noarch"
+      "evra": "32:9.18.13-1.fc38.noarch"
     },
     "bind-utils": {
-      "evra": "32:9.18.12-1.fc38.x86_64"
+      "evra": "32:9.18.13-1.fc38.x86_64"
     },
     "bootupd": {
       "evra": "0.2.9-1.fc38.x86_64"
@@ -79,7 +79,7 @@
       "evra": "3.6.1-4.fc38.x86_64"
     },
     "btrfs-progs": {
-      "evra": "6.2.1-1.fc38.x86_64"
+      "evra": "6.2.2-1.fc38.x86_64"
     },
     "bubblewrap": {
       "evra": "0.7.0-1.fc38.x86_64"
@@ -136,7 +136,7 @@
       "evra": "0.21.3-4.fc38.noarch"
     },
     "container-selinux": {
-      "evra": "2:2.204.0-1.fc38.noarch"
+      "evra": "2:2.206.0-1.fc38.noarch"
     },
     "containerd": {
       "evra": "1.6.19-1.fc38.x86_64"
@@ -187,7 +187,7 @@
       "evra": "2.6.1-1.fc38.x86_64"
     },
     "curl": {
-      "evra": "7.87.0-6.fc38.x86_64"
+      "evra": "7.87.0-7.fc38.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.x86_64"
@@ -238,13 +238,13 @@
       "evra": "4.2-6.fc38.x86_64"
     },
     "dracut": {
-      "evra": "057-6.fc38.x86_64"
+      "evra": "059-2.fc38.x86_64"
     },
     "dracut-network": {
-      "evra": "057-6.fc38.x86_64"
+      "evra": "059-2.fc38.x86_64"
     },
     "dracut-squash": {
-      "evra": "057-6.fc38.x86_64"
+      "evra": "059-2.fc38.x86_64"
     },
     "duktape": {
       "evra": "2.7.0-2.fc38.x86_64"
@@ -283,13 +283,13 @@
       "evra": "38-0.5.noarch"
     },
     "fedora-release-common": {
-      "evra": "38-0.30.noarch"
+      "evra": "38-0.32.noarch"
     },
     "fedora-release-coreos": {
-      "evra": "38-0.30.noarch"
+      "evra": "38-0.32.noarch"
     },
     "fedora-release-identity-coreos": {
-      "evra": "38-0.30.noarch"
+      "evra": "38-0.32.noarch"
     },
     "fedora-repos": {
       "evra": "38-0.5.noarch"
@@ -367,7 +367,7 @@
       "evra": "2.40.0-1.fc38.x86_64"
     },
     "glib2": {
-      "evra": "2.76.0-1.fc38.x86_64"
+      "evra": "2.76.1-1.fc38.x86_64"
     },
     "glibc": {
       "evra": "2.37-1.fc38.x86_64"
@@ -397,22 +397,22 @@
       "evra": "3.8-3.fc38.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-88.fc38.noarch"
+      "evra": "1:2.06-89.fc38.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-88.fc38.x86_64"
+      "evra": "1:2.06-89.fc38.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-88.fc38.x86_64"
+      "evra": "1:2.06-89.fc38.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-88.fc38.noarch"
+      "evra": "1:2.06-89.fc38.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-88.fc38.x86_64"
+      "evra": "1:2.06-89.fc38.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-88.fc38.x86_64"
+      "evra": "1:2.06-89.fc38.x86_64"
     },
     "gzip": {
       "evra": "1.12-3.fc38.x86_64"
@@ -496,16 +496,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.2.7-300.fc38.x86_64"
+      "evra": "6.2.8-300.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.2.7-300.fc38.x86_64"
+      "evra": "6.2.8-300.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.2.7-300.fc38.x86_64"
+      "evra": "6.2.8-300.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.2.7-300.fc38.x86_64"
+      "evra": "6.2.8-300.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -577,7 +577,7 @@
       "evra": "1.46.5-4.fc38.x86_64"
     },
     "libcurl-minimal": {
-      "evra": "7.87.0-6.fc38.x86_64"
+      "evra": "7.87.0-7.fc38.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.x86_64"
@@ -610,7 +610,7 @@
       "evra": "1.5-2.fc38.x86_64"
     },
     "libgcc": {
-      "evra": "13.0.1-0.7.fc38.x86_64"
+      "evra": "13.0.1-0.8.fc38.x86_64"
     },
     "libgcrypt": {
       "evra": "1.10.1-7.fc38.x86_64"
@@ -730,7 +730,7 @@
       "evra": "1.15.1-2.fc38.x86_64"
     },
     "libreport-filesystem": {
-      "evra": "2.17.8-1.fc38.noarch"
+      "evra": "2.17.9-1.fc38.noarch"
     },
     "libseccomp": {
       "evra": "2.5.3-4.fc38.x86_64"
@@ -742,7 +742,7 @@
       "evra": "3.5-1.fc38.x86_64"
     },
     "libsemanage": {
-      "evra": "3.5-1.fc38.x86_64"
+      "evra": "3.5-2.fc38.x86_64"
     },
     "libsepol": {
       "evra": "3.5-1.fc38.x86_64"
@@ -757,7 +757,7 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.0-10.fc38.x86_64"
+      "evra": "2:4.18.0-12.fc38.x86_64"
     },
     "libsolv": {
       "evra": "0.7.22-4.fc38.x86_64"
@@ -778,7 +778,7 @@
       "evra": "2.8.2-4.fc38.x86_64"
     },
     "libstdc++": {
-      "evra": "13.0.1-0.7.fc38.x86_64"
+      "evra": "13.0.1-0.8.fc38.x86_64"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.x86_64"
@@ -826,7 +826,7 @@
       "evra": "0.3.2-5.fc38.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.18.0-10.fc38.x86_64"
+      "evra": "2:4.18.0-12.fc38.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.33-7.fc38.x86_64"
@@ -928,7 +928,7 @@
       "evra": "1:1.0.5-2.fc38.x86_64"
     },
     "nmstate": {
-      "evra": "2.2.8-1.fc38.x86_64"
+      "evra": "2.2.9-1.fc38.x86_64"
     },
     "npth": {
       "evra": "1.6-12.fc38.x86_64"
@@ -952,19 +952,19 @@
       "evra": "2.6.4-1.fc38.x86_64"
     },
     "openssh": {
-      "evra": "9.0p1-12.fc38.1.x86_64"
+      "evra": "9.0p1-14.fc38.1.x86_64"
     },
     "openssh-clients": {
-      "evra": "9.0p1-12.fc38.1.x86_64"
+      "evra": "9.0p1-14.fc38.1.x86_64"
     },
     "openssh-server": {
-      "evra": "9.0p1-12.fc38.1.x86_64"
+      "evra": "9.0p1-14.fc38.1.x86_64"
     },
     "openssl": {
-      "evra": "1:3.0.8-1.fc38.x86_64"
+      "evra": "1:3.0.8-2.fc38.x86_64"
     },
     "openssl-libs": {
-      "evra": "1:3.0.8-1.fc38.x86_64"
+      "evra": "1:3.0.8-2.fc38.x86_64"
     },
     "os-prober": {
       "evra": "1.81-3.fc38.x86_64"
@@ -1072,13 +1072,13 @@
       "evra": "2:1.1.4-2.fc38.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.0-10.fc38.x86_64"
+      "evra": "2:4.18.0-12.fc38.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.18.0-10.fc38.noarch"
+      "evra": "2:4.18.0-12.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.0-10.fc38.x86_64"
+      "evra": "2:4.18.0-12.fc38.x86_64"
     },
     "sed": {
       "evra": "4.8-12.fc38.x86_64"
@@ -1099,10 +1099,10 @@
       "evra": "1.46-5.fc38.x86_64"
     },
     "shadow-utils": {
-      "evra": "2:4.13-5.fc38.x86_64"
+      "evra": "2:4.13-6.fc38.x86_64"
     },
     "shadow-utils-subid": {
-      "evra": "2:4.13-5.fc38.x86_64"
+      "evra": "2:4.13-6.fc38.x86_64"
     },
     "shared-mime-info": {
       "evra": "2.2-3.fc38.x86_64"
@@ -1168,25 +1168,25 @@
       "evra": "1.9.13-1.p2.fc38.x86_64"
     },
     "systemd": {
-      "evra": "253-6.fc38.x86_64"
+      "evra": "253.2-1.fc38.x86_64"
     },
     "systemd-container": {
-      "evra": "253-6.fc38.x86_64"
+      "evra": "253.2-1.fc38.x86_64"
     },
     "systemd-libs": {
-      "evra": "253-6.fc38.x86_64"
+      "evra": "253.2-1.fc38.x86_64"
     },
     "systemd-pam": {
-      "evra": "253-6.fc38.x86_64"
+      "evra": "253.2-1.fc38.x86_64"
     },
     "systemd-resolved": {
-      "evra": "253-6.fc38.x86_64"
+      "evra": "253.2-1.fc38.x86_64"
     },
     "systemd-udev": {
-      "evra": "253-6.fc38.x86_64"
+      "evra": "253.2-1.fc38.x86_64"
     },
     "tar": {
-      "evra": "2:1.34-7.fc38.x86_64"
+      "evra": "2:1.34-8.fc38.x86_64"
     },
     "teamd": {
       "evra": "1.31-7.fc38.x86_64"
@@ -1213,10 +1213,10 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1407-1.fc38.noarch"
+      "evra": "2:9.0.1429-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1407-1.fc38.x86_64"
+      "evra": "2:9.0.1429-1.fc38.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc38.x86_64"
@@ -1256,13 +1256,13 @@
     }
   },
   "metadata": {
-    "generated": "2023-03-22T00:00:00Z",
+    "generated": "2023-04-02T00:00:00Z",
     "rpmmd_repos": {
       "fedora-coreos-pool": {
-        "generated": "2023-03-21T17:47:06Z"
+        "generated": "2023-04-01T22:33:14Z"
       },
       "fedora-next": {
-        "generated": "2023-03-22T09:33:12Z"
+        "generated": "2023-04-01T17:05:27Z"
       },
       "fedora-next-updates": {
         "generated": "2018-02-20T19:18:14Z"
diff --git a/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf
index 6a32713b9f..3833a163ba 100644
--- a/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf
+++ b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf
@@ -12,4 +12,4 @@ omit_dracutmodules+=" systemd-networkd network-legacy network-wicked "
 # We use systemd network naming
 omit_dracutmodules+=" biosdevname "
 # Random stuff we don't want
-omit_dracutmodules+=" rngd busybox dbus-daemon memstrack pcsc bluetooth "
+omit_dracutmodules+=" dbus-daemon memstrack "
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target
index b003f4d94b..e0fd500cd4 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-multipath/coreos-multipath-wait.target
@@ -8,6 +8,9 @@ After=dev-disk-by\x2dlabel-dm\x2dmpath\x2dboot.device
 Requires=multipathd.service
 After=multipathd.service
 
+OnFailure=emergency.target
+OnFailureJobMode=isolate
+
 # This is already enforced transitively by coreos-gpt-setup.service, but
 # let's be more explicit and list it directly here too.
 Before=coreos-ignition-setup-user.service
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
index 21aca809e9..78e2fa70a0 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/40ignition-ostree/ignition-ostree-firstboot-uuid
@@ -62,10 +62,6 @@ if [ "${TYPE}" == "${orig_type}" ] && [ "${UUID}" == "${orig_uuid}" ]; then
     *) echo "unexpected filesystem type ${TYPE}" 1>&2; exit 1 ;;
   esac
   udevadm settle || :
-  # Workaround for https://bugzilla.redhat.com/show_bug.cgi?id=2162151.
-  # We nuke the blkid cache containing stale UUIDs so that future blkid calls
-  # (or tools leveraging libblkid) will be forced to re-probe.
-  rm -rf /run/blkid
   echo "Regenerated UUID for ${target}"
 else
   echo "No changes required for ${target} TYPE=${TYPE} UUID=${UUID}"
diff --git a/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config b/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config
index 4f69312f74..41e6c0b951 100755
--- a/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config
+++ b/overlay.d/20platform-chrony/usr/libexec/coreos-platform-chrony-config
@@ -18,6 +18,10 @@ if ! cmp {/usr,}/etc/chrony.conf >/dev/null; then
     echo "$self: /etc/chrony.conf is modified; not changing the default"
     exit 0
 fi
+if ! cmp {/usr,}/etc/sysconfig/chronyd >/dev/null; then
+    echo "$self: /etc/sysconfig/chronyd is modified; not changing the default"
+    exit 0
+fi
 
 mkdir -p /run/coreos
 confpath=/run/coreos/platform-chrony.conf
diff --git a/tests/kola/butane/grub-users/config.bu b/tests/kola/butane/grub-users/config.bu
index 10e389fa38..b29a490d51 100644
--- a/tests/kola/butane/grub-users/config.bu
+++ b/tests/kola/butane/grub-users/config.bu
@@ -1,5 +1,5 @@
 variant: fcos
-version: 1.5.0-experimental
+version: 1.5.0
 grub:
   users:
     - name: bovik
diff --git a/tests/kola/ignition/resource/authenticated-s3/config.bu b/tests/kola/ignition/resource/authenticated-s3/config.bu
index 73921033ec..444a258a72 100644
--- a/tests/kola/ignition/resource/authenticated-s3/config.bu
+++ b/tests/kola/ignition/resource/authenticated-s3/config.bu
@@ -2,7 +2,7 @@
 # associated with the instance
 
 variant: fcos
-version: 1.5.0-experimental
+version: 1.5.0
 ignition:
   config:
     merge:
diff --git a/tests/kola/ignition/resource/remote/config.bu b/tests/kola/ignition/resource/remote/config.bu
index b9e0b15f1e..ea45d98587 100644
--- a/tests/kola/ignition/resource/remote/config.bu
+++ b/tests/kola/ignition/resource/remote/config.bu
@@ -1,5 +1,5 @@
 variant: fcos
-version: 1.5.0-experimental
+version: 1.5.0
 storage:
   files:
     - path: /var/resource/http
diff --git a/tests/kola/upgrade/extended/config.bu b/tests/kola/upgrade/extended/config.bu
new file mode 100644
index 0000000000..671e295a4e
--- /dev/null
+++ b/tests/kola/upgrade/extended/config.bu
@@ -0,0 +1,24 @@
+variant: fcos
+# Must use version 1.0.0 here to use Ignition spec 3.0.0 for
+# our oldest supported starting points (i.e. 31.20200108.3.0)
+version: 1.0.0
+storage:
+  files:
+    - path: /etc/systemd/journald.conf.d/forward-to-console.conf
+      mode: 0644
+      contents:
+        inline: |
+          # Send journal messages to the console. This is so we can see the
+          # progress even after autopkgtest-reboot-prepare has been called.
+          [Journal]
+          ForwardToConsole=yes
+    - path: /etc/zincati/config.d/99-config.toml
+      mode: 0644
+      contents:
+        inline: |
+          # Don't wait for any rollout window, update ASAP
+          [identity]
+          rollout_wariness = 0.0000
+          # Increase the frequency at which we check for updates
+          [agent.timing]
+          steady_interval_secs = 20
diff --git a/tests/kola/upgrade/extended/data/commonlib.sh b/tests/kola/upgrade/extended/data/commonlib.sh
new file mode 120000
index 0000000000..b8dcbdca1a
--- /dev/null
+++ b/tests/kola/upgrade/extended/data/commonlib.sh
@@ -0,0 +1 @@
+../../../data/commonlib.sh
\ No newline at end of file
diff --git a/tests/kola/upgrade/extended/test.sh b/tests/kola/upgrade/extended/test.sh
new file mode 100755
index 0000000000..3bd7b43efc
--- /dev/null
+++ b/tests/kola/upgrade/extended/test.sh
@@ -0,0 +1,167 @@
+#!/bin/bash
+## kola:
+##   # - needs-internet: to pull updates
+##   tags: "needs-internet"
+##   # Extend the timeout since a lot of updates/reboots can happen.
+##   timeoutMin: 45
+##   # Only run this test when specifically requested.
+##   requiredTag: extended-upgrade
+
+set -eux -o pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+# This test will attempt to test an upgrade from a given starting
+# point (assumed by the caller passing in a specific
+# `cosa kola run --build=x.y.z`) all the way to the latest build
+# that is staged to be released. The test is basic in that it
+# essentially tests 1) updates work 2) boot works.
+#
+# An example invocation for this test would look like:
+
+# ```
+# cosa buildfetch --stream=next --build=34.20210904.1.0 --artifact=qemu
+# cosa decompress --build=34.20210904.1.0
+# cosa kola run --build=34.20210904.1.0 --tag extended-upgrade
+# ```
+#
+# You can monitor the progress from the console and journal:
+#   - everything:
+#       - tail -f tmp/kola/ext.config.upgrade.extended/*/console.txt
+#   - major events:
+#       - tail -f tmp/kola/ext.config.upgrade.extended/*/journal.txt | grep --color -i 'ok reached version'
+#
+# For convenience, here is a list of the earliest releases on each
+# stream/architecture. x86_64 minimum version has to be 32.x because
+# of https://github.com/coreos/fedora-coreos-tracker/issues/1448
+#
+# stable
+#   - x86_64  31.20200108.3.0 -> works for BIOS, not UEFI
+#             32.20200601.3.0
+#   - aarch64 34.20210821.3.0
+#   - s390x   36.20220618.3.1
+# testing
+#   - x86_64  32.20200601.2.1
+#   - aarch64 34.20210904.2.0
+#   - s390x   36.20220618.2.0
+# next
+#   - x86_64  32.20200416.1.0
+#   - aarch64 34.20210904.1.0
+#   - s390x   36.20220618.1.1
+
+. /etc/os-release # for $VERSION_ID
+
+# delete the disabling of updates that was done by the test framework
+if [ -f /etc/zincati/config.d/90-disable-auto-updates.toml ]; then
+    rm -f /etc/zincati/config.d/90-disable-auto-updates.toml
+    systemctl restart zincati
+fi
+
+version=$(rpm-ostree status  --json | jq -r '.deployments[0].version')
+stream=$(rpm-ostree status  --json | jq -r '.deployments[0]["base-commit-meta"]["fedora-coreos.stream"]')
+
+# Pick up the last release for the current stream
+test -f /srv/releases.json || \
+    curl -L "https://builds.coreos.fedoraproject.org/prod/streams/${stream}/releases.json" > /srv/releases.json
+last_release=$(jq -r .releases[-1].version /srv/releases.json)
+
+# If the user dropped down a /etc/target_stream file then we'll
+# pick up the info from there.
+target_stream=$stream
+test -f /etc/target_stream && target_stream=$(< /etc/target_stream)
+test -f /srv/builds.json || \
+    curl -L "https://builds.coreos.fedoraproject.org/prod/streams/${target_stream}/builds/builds.json" > /srv/builds.json
+target_version=$(jq -r .builds[0].id /srv/builds.json)
+
+
+grab-gpg-keys() {
+    # For older FCOS we had an issue where when we tried to pull the
+    # commits from the repo it would fail if we were on N-2 because
+    # the newer commits would be signed with a key the old OS didn't
+    # know anything about. We applied a workaround in newer releases,
+    # so this workaround should be limited to zincati older than v0.0.24
+    # https://github.com/coreos/fedora-coreos-tracker/issues/749
+    max_version=${target_version:0:2} # i.e. 36, 37, 38, etc..
+    for ver in $(seq $VERSION_ID $max_version); do
+        test -e "/etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-${ver}-primary" && continue
+        curl -L "https://src.fedoraproject.org/rpms/fedora-repos/raw/rawhide/f/RPM-GPG-KEY-fedora-${ver}-primary" | \
+            sudo tee "/etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-${ver}-primary"
+        sudo chcon -v --reference="/etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-${VERSION_ID}-primary" "/etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-${ver}-primary"
+    done
+}
+
+fix-update-url() {
+    # We switched to non stg URL in zincati v0.0.10 [1]. For older clients
+    # we need to update the runtime configuration of zincati to get past the problem.
+    # [1] https://github.com/coreos/zincati/commit/1d73801ccd015cdce89f082cb1eeb9b4b8335760
+    cat <<'EOF' > /run/zincati/config.d/50-fedora-coreos-cincinnati.toml
+[cincinnati]
+base_url= "https://updates.coreos.fedoraproject.org"
+EOF
+    systemctl restart zincati
+}
+
+ok "Reached version: $version"
+
+# Are we all the way at the desired target version?
+# If so then we can exit with success!
+if vereq $version $target_version; then
+    ok "Fully upgraded to $target_version"
+    # log bootupctl information for inspection where available
+    [ -f /usr/bin/bootupctl ] && /usr/bin/bootupctl status
+    exit 0
+fi
+
+# Apply workarounds based on the current version of the system.
+#
+# First release on each stream with new enough zincati for updates stg.fedoraprojec.org
+# - 31.20200505.3.0
+# - 31.20200505.2.0
+# - 32.20200505.1.0
+#
+# First release with new enough zincati with workaround for N-2 gpg key issue
+# - 35.20211119.3.0
+# - 35.20211119.2.0
+# - 35.20211119.1.0
+#
+case "$stream" in
+    'next')
+        verlt $version '35.20211119.1.0' && grab-gpg-keys
+        verlt $version '31.20200505.1.0' && fix-update-url
+        ;;
+    'testing')
+        verlt $version '35.20211119.2.0' && grab-gpg-keys
+        verlt $version '31.20200505.2.0' && fix-update-url
+        ;;
+    'stable')
+        verlt $version '35.20211119.3.0' && grab-gpg-keys
+        verlt $version '31.20200505.3.0' && fix-update-url
+        ;;
+    *) fatal "unexpected stream: $stream";;
+esac
+
+# If we have made it all the way to the last release then
+# we have one more test. We'll now rebase to the target
+# version, which should be in the compose OSTree repo.
+if vereq $version $last_release; then
+    systemctl stop zincati
+    rpm-ostree rebase "fedora-compose:fedora/$(arch)/coreos/${target_stream}" $target_version
+    /tmp/autopkgtest-reboot reboot # execute the reboot
+    sleep infinity
+fi
+
+# Watch the Zincati logs to see if it got a lead on a new update.
+# Timeout after some time if no update. Unset pipefail since the
+# journalctl -f will give a bad exit code when grep exits early.
+set +o pipefail
+cmd="journalctl -b 0 -f --no-tail -u zincati.service"
+if ! timeout 90s $cmd | grep --max-count=1 'proceeding to stage it'; then
+    # No update initiated within timeout; let's error.
+    fatal "Updating the system stalled out on version: $version"
+fi
+set -o pipefail
+
+
+# OK update has been initiated, prepare for reboot and sleep
+/tmp/autopkgtest-reboot-prepare reboot
+sleep infinity