diff --git a/build/root/WORKSPACE b/build/root/WORKSPACE
index 4e9b42caf13..c876b3454d6 100644
--- a/build/root/WORKSPACE
+++ b/build/root/WORKSPACE
@@ -1,15 +1,15 @@
 http_archive(
     name = "io_bazel_rules_go",
-    sha256 = "af4281751a0e3b5d87fb6a52c83d358871b4f83d7acbe6e65a901fba6612a03e",
-    strip_prefix = "rules_go-bdf2df58c0d352ffa262ae4b36c7a1a2d6e3f0c9",
-    urls = ["https://github.com/bazelbuild/rules_go/archive/bdf2df58c0d352ffa262ae4b36c7a1a2d6e3f0c9.tar.gz"],
+    sha256 = "66282d078c1847c2d876c02c5dabd4fd57cc75eb41a9668a2374352fa73b4587",
+    strip_prefix = "rules_go-ff7e3364d9383cf14155f8c2efc87218d07eb03b",
+    urls = ["https://github.com/bazelbuild/rules_go/archive/ff7e3364d9383cf14155f8c2efc87218d07eb03b.tar.gz"],
 )
 
 http_archive(
     name = "io_kubernetes_build",
-    sha256 = "f4946917d95c54aaa98d1092757256e491f8f48fd550179134f00f902bc0b4ce",
-    strip_prefix = "repo-infra-c75960142a50de16ac6225b0843b1ff3476ab0b4",
-    urls = ["https://github.com/kubernetes/repo-infra/archive/c75960142a50de16ac6225b0843b1ff3476ab0b4.tar.gz"],
+    sha256 = "007774f06536059f3f782d1a092bddc625d88c17f20bbe731cea844a52485b11",
+    strip_prefix = "repo-infra-97099dccc8807e9159dc28f374a8f0602cab07e1",
+    urls = ["https://github.com/kubernetes/repo-infra/archive/97099dccc8807e9159dc28f374a8f0602cab07e1.tar.gz"],
 )
 
 http_archive(
diff --git a/hack/update-bazel.sh b/hack/update-bazel.sh
index 1690c32f8f5..a3c983ef6c5 100755
--- a/hack/update-bazel.sh
+++ b/hack/update-bazel.sh
@@ -29,10 +29,10 @@ rm -f "${KUBE_ROOT}/pkg/generated/openapi/zz_generated.openapi.go"
 # The git commit sha1s here should match the values in $KUBE_ROOT/WORKSPACE.
 kube::util::go_install_from_commit \
     github.com/kubernetes/repo-infra/kazel \
-    ae4e9a3906ace4ba657b7a09242610c6266e832c
+    97099dccc8807e9159dc28f374a8f0602cab07e1
 kube::util::go_install_from_commit \
     github.com/bazelbuild/bazel-gazelle/cmd/gazelle \
-    31ce76e3acc34a22434d1a783bb9b3cae790d108  # 0.8.0
+    39e8257565d3917c1674bf37d6538c10cdac2260
 
 touch "${KUBE_ROOT}/vendor/BUILD"