diff --git a/.gitignore b/.gitignore
index 293c65d..06f1621 100644
--- a/.gitignore
+++ b/.gitignore
@@ -10,3 +10,4 @@
 /image-builder-cli-36.tar.gz
 /image-builder-cli-40.tar.gz
 /image-builder-cli-41.tar.gz
+/image-builder-cli-42.tar.gz
diff --git a/image-builder.spec b/image-builder.spec
index 9d634f8..f86b52d 100644
--- a/image-builder.spec
+++ b/image-builder.spec
@@ -7,7 +7,7 @@
 
 %global goipath         github.com/osbuild/image-builder-cli
 
-Version:        41
+Version:        42
 
 %gometa
 
@@ -144,8 +144,8 @@ Provides: bundled(golang(github.com/opencontainers/go-digest)) = 1.0.0
 Provides: bundled(golang(github.com/opencontainers/image-spec)) = 1.1.1
 Provides: bundled(golang(github.com/opencontainers/runtime-spec)) = 1.2.1
 Provides: bundled(golang(github.com/opencontainers/selinux)) = 1.12.0
-Provides: bundled(golang(github.com/osbuild/blueprint)) = 1.16.0
-Provides: bundled(golang(github.com/osbuild/images)) = 0.216.0
+Provides: bundled(golang(github.com/osbuild/blueprint)) = 1.18.0
+Provides: bundled(golang(github.com/osbuild/images)) = 0.223.0
 Provides: bundled(golang(github.com/pkg/errors)) = 0.9.1
 Provides: bundled(golang(github.com/pmezard/go-difflib)) = 5d4384e
 Provides: bundled(golang(github.com/proglottis/gpgme)) = 0.1.4
@@ -157,8 +157,8 @@ Provides: bundled(golang(github.com/sigstore/protobuf-specs)) = 0.4.1
 Provides: bundled(golang(github.com/sigstore/sigstore)) = 1.9.5
 Provides: bundled(golang(github.com/sirupsen/logrus)) = 1.9.3
 Provides: bundled(golang(github.com/smallstep/pkcs7)) = 0.1.1
-Provides: bundled(golang(github.com/spf13/cobra)) = 1.9.1
-Provides: bundled(golang(github.com/spf13/pflag)) = 1.0.7
+Provides: bundled(golang(github.com/spf13/cobra)) = 1.10.1
+Provides: bundled(golang(github.com/spf13/pflag)) = 1.0.9
 Provides: bundled(golang(github.com/stefanberger/go-pkcs11uri)) = 7828495
 Provides: bundled(golang(github.com/stretchr/testify)) = 1.11.1
 Provides: bundled(golang(github.com/sylabs/sif/v2)) = 2.21.1
@@ -175,7 +175,7 @@ Provides: bundled(golang(go.opentelemetry.io/otel)) = 1.36.0
 Provides: bundled(golang(go.opentelemetry.io/otel/metric)) = 1.36.0
 Provides: bundled(golang(go.opentelemetry.io/otel/trace)) = 1.36.0
 Provides: bundled(golang(go.yaml.in/yaml/v2)) = 2.4.2
-Provides: bundled(golang(go.yaml.in/yaml/v3)) = 3.0.3
+Provides: bundled(golang(go.yaml.in/yaml/v3)) = 3.0.4
 Provides: bundled(golang(golang.org/x/crypto)) = 0.41.0
 Provides: bundled(golang(golang.org/x/exp)) = 7d7fa50
 Provides: bundled(golang(golang.org/x/net)) = 0.43.0
@@ -190,7 +190,7 @@ Provides: bundled(golang(google.golang.org/protobuf)) = 1.36.7
 Provides: bundled(golang(gopkg.in/ini.v1)) = 1.67.0
 Provides: bundled(golang(gopkg.in/yaml.v3)) = 3.0.1
 Provides: bundled(golang(libvirt.org/go/libvirt)) = 1.11006.0
-Provides: bundled(golang(sigs.k8s.io/yaml)) = 1.5.0
+Provides: bundled(golang(sigs.k8s.io/yaml)) = 1.6.0
 # BUNDLE_END
 %endif
 
@@ -259,6 +259,9 @@ cd $PWD/_build/src/%{goipath}
 %{_bindir}/image-builder
 
 %changelog
+* Thu Nov 27 2025 imagebuilder-bot <imagebuilder-bots+imagebuilder-bot@redhat.com> - 42-1
+- New upstream release
+
 * Wed Nov 12 2025 imagebuilder-bot <imagebuilder-bots+imagebuilder-bot@redhat.com> - 41-1
 - New upstream release
 
diff --git a/sources b/sources
index c8c03bf..d28804a 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (image-builder-cli-41.tar.gz) = 392178f215e66580d93051d23e2a50b6d708b2517b2d4ef7e987dc370529cbeaf08e52e37dac8a7f989531df0150b2bdf04431518ca64be25d637048cb25047c
+SHA512 (image-builder-cli-42.tar.gz) = c2b4862de1fab3081ae1beb8a61cbec10e5441ce9bcc57a643512f24010ef886e94249b302bf42797520114ab6f1ff6f27c4bc053dcaafd82c2056944c8bee34