diff --git a/.bolt.metadata b/.bolt.metadata
new file mode 100644
index 0000000..f33ae91
--- /dev/null
+++ b/.bolt.metadata
@@ -0,0 +1 @@
+27ea192596b3e332ec6d05073f364653bc490782 bolt-0.9.7.tar.gz
diff --git a/.gitignore b/.gitignore
index 55e51e2..dbd3170 100644
--- a/.gitignore
+++ b/.gitignore
@@ -21,3 +21,4 @@ tests/source/
 /bolt-0.9.1.tar.gz
 /bolt-0.9.2.tar.gz
 /bolt-0.9.5.tar.gz
+/bolt-0.9.7.tar.gz
diff --git a/0001-test-test-unix-skip-unix-domain-socket-test.patch b/0001-test-test-unix-skip-unix-domain-socket-test.patch
new file mode 100644
index 0000000..d0b1f94
--- /dev/null
+++ b/0001-test-test-unix-skip-unix-domain-socket-test.patch
@@ -0,0 +1,31 @@
+From 74eace0d89b63be92615364568ba36ad7d748477 Mon Sep 17 00:00:00 2001
+From: Kate Hsuan <hpa@redhat.com>
+Date: Tue, 14 Feb 2023 16:25:04 +0800
+Subject: [PATCH] test: test-unix: skip unix domain socket test
+
+Skip the test since we can't test unix domain socket in mock.
+---
+ tests/test-unix.c | 7 -------
+ 1 file changed, 7 deletions(-)
+
+diff --git a/tests/test-unix.c b/tests/test-unix.c
+index 98de3db..366488f 100644
+--- a/tests/test-unix.c
++++ b/tests/test-unix.c
+@@ -198,13 +198,6 @@ main (int argc, char **argv)
+               test_pid_is_alive,
+               NULL);
+ 
+-  g_test_add ("/common/unix/bolt_sd_notify",
+-              TestNotify,
+-              NULL,
+-              test_notify_setup,
+-              test_sd_notify,
+-              test_notify_teardown);
+-
+   g_test_add ("/common/unix/sd_watchdog_enabled",
+               TestDummy,
+               NULL,
+-- 
+2.39.1
+
diff --git a/bolt.spec b/bolt.spec
index a032b9c..c02ae59 100644
--- a/bolt.spec
+++ b/bolt.spec
@@ -1,10 +1,11 @@
 Name:          bolt
-Version:       0.9.5
+Version:       0.9.7
 Release:       1%{?dist}
 Summary:       Thunderbolt device manager
 License:       LGPLv2+
 URL:           https://gitlab.freedesktop.org/bolt/bolt
 Source0:       %{url}/-/archive/%{version}/%{name}-%{version}.tar.gz
+Patch0:        0001-test-test-unix-skip-unix-domain-socket-test.patch
 
 BuildRequires: gcc
 BuildRequires: asciidoc
@@ -76,6 +77,10 @@ mentioned tasks.
 %ghost %dir %{_localstatedir}/lib/boltd
 
 %changelog
+* Tue Mar 26 2024 Kate Hsuan <hpa@redhat.com> - 0.9.7-1
+- Update to upstream release 0.9.7
+- Support 'nopcie' security level
+
 * Mon Jan 9 2023 Kate Hsuan <hpa@redhat.com> - 0.9.5-1
 - New 0.9.5 upstream release
 
diff --git a/sources b/sources
index d4e2266..15cfdb2 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (bolt-0.9.5.tar.gz) = cf8625f45d15f5685d99a49c5993a9196b355158be660c63fb22f86c2d9806d41cc13702d2e8d1b8e6f37e4acf3485e2b2c0eb19f907732bdf670680cbc073ae
+SHA512 (bolt-0.9.7.tar.gz) = a9ae0425cdba8932356ec4dcf3f6b3469478c01d47ef3b741c0a841117c81b354f35860be6011ea3b43b28ae10164909a82e2bdbcf92e8541c637cf44277a36c