diff --git a/nodejs20.spec b/nodejs20.spec
index fb5d97a..c2e0dfa 100644
--- a/nodejs20.spec
+++ b/nodejs20.spec
@@ -26,8 +26,8 @@
 # than a Fedora release lifecycle.
 %global nodejs_epoch 1
 %global nodejs_major 20
-%global nodejs_minor 5
-%global nodejs_patch 1
+%global nodejs_minor 6
+%global nodejs_patch 0
 # nodejs_soversion - from NODE_MODULE_VERSION in src/node_version.h
 %global nodejs_soversion 115
 %global nodejs_abi %{nodejs_soversion}
@@ -97,7 +97,7 @@
 
 # npm - from deps/npm/package.json
 %global npm_epoch 1
-%global npm_version 9.8.0
+%global npm_version 9.8.1
 
 # In order to avoid needing to keep incrementing the release version for the
 # main package forever, we will just construct one for npm that is guaranteed
@@ -145,7 +145,7 @@ Source203: v8.pc.in
 # These are generated by nodejs-sources.sh
 Source101: cjs-module-lexer-1.2.2-stripped.tar.gz
 Source102: wasi-sdk-11.0-linux.tar.gz
-Source111: undici-5.22.1-stripped.tar.gz
+Source111: undici-5.23.0-stripped.tar.gz
 Source112: wasi-sdk-20.0-linux.tar.gz
 
 Patch: 0001-Remove-unused-OpenSSL-config.patch
@@ -299,7 +299,7 @@ Provides: bundled(histogram) = %{histogram_version}
 
 # Upstream has added a new URL parser that has no option to build as a shared
 # library (19.7.0+)
-Provides: bundled(ada) = 2.5.1
+Provides: bundled(ada) = 2.6.0
 
 
 %description
diff --git a/sources b/sources
index 10a3829..139f38b 100644
--- a/sources
+++ b/sources
@@ -1,7 +1,7 @@
-SHA512 (node-v20.5.1-stripped.tar.gz) = b32d85d88ca37b5db2f7d82165ea92c8998a7a5a8db45a15d05e75a01f9da8e9747bea4ff1ec053f86fd9d6979e79ac584f4ffb4dfc59df058a35c0cf778fe18
+SHA512 (node-v20.6.0-stripped.tar.gz) = d5dd771a321611ff01b7c7b14ccef866f481c13af689d7429b10730f317eafe4543e4dc1cda1d3bbba841f9ccee4e8d9e76b79eab536c0cfc6b0201642ba9e7a
 SHA512 (icu4c-73_2-data-bin-b.zip) = 8512947da7b2a927627abed6bd7e04218cd4fcd02d44eb72a82ffa87aedabfc3be5d3152e9fba33a769ef35e2db55764c2ab8f5bd65b4e89aa9c15b33392e078
 SHA512 (icu4c-73_2-data-bin-l.zip) = 420c2f5090927dab13f5449da3b0ec7bf86a91ea8723f177aca2907a8eea9bcb4c3475b66c54355ae320001813db57a00afdab00bd85b8c36d39adedcab80bfc
-SHA512 (cjs-module-lexer-1.2.2-stripped.tar.gz) = 0e1cf8cd4960036b8ccf9bcbd87c837e3686515be00bb06e7980ff6c5384a5287182df31303754a22d8af040ee635e9c0e7ed7a86fde4e4d538621a253b7a612
+SHA512 (cjs-module-lexer-1.2.2-stripped.tar.gz) = 0380a1b73bbe835fa97c28e32a075025b8d2e2dbdd4ef8ba0ee955b2d02cb3d9cffd9e59ccd0ca02a93bfae166252b32784258f0ee06d7a7955347a061649019
 SHA512 (wasi-sdk-11.0-linux.tar.gz) = e3ed4597f7f2290967eef6238e9046f60abbcb8633a4a2a51525d00e7393df8df637a98a5b668217d332dd44fcbf2442ec7efd5e65724e888d90611164451e20
-SHA512 (undici-5.22.1-stripped.tar.gz) = 8806f0425ddc0eb0e66f85bf2c7cbe7d555ef7740e28ec4eb90e3fa88f507287a7c4bc956b504dad4da8065d3d2ae4b9a0a1e700f57a57e389e2621d1af0dfe9
+SHA512 (undici-5.23.0-stripped.tar.gz) = 7a3071de46b189c1d5721e02793a0c8c7b1581f3557f4d63a0c7afc70154ecabfb3c0f7dd68924f0eb5093ed7c2d6c92a149ee17ad02a6d7af9b0d3cbc362f20
 SHA512 (wasi-sdk-20.0-linux.tar.gz) = ff3d368267526887534f50767ff010bd368e9c24178ab2f0cf57a8ed0b3a82fbf85986d620ab2327ac6bb3f456c65adc6edb80626a1289e630dde7e43b191b42