diff --git a/nodejs20.spec b/nodejs20.spec
index 984eb4c..ab940bc 100644
--- a/nodejs20.spec
+++ b/nodejs20.spec
@@ -26,8 +26,8 @@
 # than a Fedora release lifecycle.
 %global nodejs_epoch 1
 %global nodejs_major 20
-%global nodejs_minor 6
-%global nodejs_patch 1
+%global nodejs_minor 7
+%global nodejs_patch 0
 # nodejs_soversion - from NODE_MODULE_VERSION in src/node_version.h
 %global nodejs_soversion 115
 %global nodejs_abi %{nodejs_soversion}
@@ -97,7 +97,7 @@
 
 # npm - from deps/npm/package.json
 %global npm_epoch 1
-%global npm_version 9.8.1
+%global npm_version 10.1.0
 
 # In order to avoid needing to keep incrementing the release version for the
 # main package forever, we will just construct one for npm that is guaranteed
diff --git a/sources b/sources
index e72b2a0..6e0a420 100644
--- a/sources
+++ b/sources
@@ -1,7 +1,7 @@
-SHA512 (node-v20.6.1-stripped.tar.gz) = 68a90f4057f73dfda48036499ada557eb28f4a41b01d03fe68c0accb4baad7704df176d9f381b85a3804ea4e3006d2dbc2e0f11bef4a1e1eba2cdec4a5d99eda
+SHA512 (node-v20.7.0-stripped.tar.gz) = 0d09dd5c44ec2ebe8713c05d849d54bccc407c9904a9a8fd24c3ac59aee5434f5e3e44618cb386e2072704467eb228e6895ac22d4e0c66b16866a1814b24df9f
 SHA512 (icu4c-73_2-data-bin-b.zip) = 8512947da7b2a927627abed6bd7e04218cd4fcd02d44eb72a82ffa87aedabfc3be5d3152e9fba33a769ef35e2db55764c2ab8f5bd65b4e89aa9c15b33392e078
 SHA512 (icu4c-73_2-data-bin-l.zip) = 420c2f5090927dab13f5449da3b0ec7bf86a91ea8723f177aca2907a8eea9bcb4c3475b66c54355ae320001813db57a00afdab00bd85b8c36d39adedcab80bfc
-SHA512 (cjs-module-lexer-1.2.2-stripped.tar.gz) = c63fe914db2c504deea35688b07db2c8ee46fb46b81b91bb80e266bddad93a08ddaaaf9d6a58d799e0eb8a2737fffa0e4ae8e452e9b76ea76ea1b98ad6d3fc9d
+SHA512 (cjs-module-lexer-1.2.2-stripped.tar.gz) = 939a766bb25ad2c5392fbaecff9ced4a4f4e87819a4ff6df6cadfbc7681009521769fdd40f0f13a227b64df577b5596b92349bc575a7c06bece607769e46fc56
 SHA512 (wasi-sdk-11.0-linux.tar.gz) = e3ed4597f7f2290967eef6238e9046f60abbcb8633a4a2a51525d00e7393df8df637a98a5b668217d332dd44fcbf2442ec7efd5e65724e888d90611164451e20
-SHA512 (undici-5.23.0-stripped.tar.gz) = 9fe1a6398508478d2dad410bef5366fb46b213b5532f2dff35e64d32f150b7a8e43d2d4de445f483bdf519eebc8658efdac48f51cb44f0483145a58fb050887a
+SHA512 (undici-5.23.0-stripped.tar.gz) = 10d52153742164a53281e5b900a61b8ca4542d0b6bd4ba288103aed5dd992143a3910257facdbf66fe82f41150f6c9db29ec753eae46cd8b2bd0089f0990e8d2
 SHA512 (wasi-sdk-20.0-linux.tar.gz) = ff3d368267526887534f50767ff010bd368e9c24178ab2f0cf57a8ed0b3a82fbf85986d620ab2327ac6bb3f456c65adc6edb80626a1289e630dde7e43b191b42