diff --git a/nodejs18.spec b/nodejs18.spec
index cfc1f5c..12e87b2 100644
--- a/nodejs18.spec
+++ b/nodejs18.spec
@@ -26,8 +26,8 @@
 # than a Fedora release lifecycle.
 %global nodejs_epoch 1
 %global nodejs_major 18
-%global nodejs_minor 18
-%global nodejs_patch 2
+%global nodejs_minor 19
+%global nodejs_patch 0
 # nodejs_soversion - from NODE_MODULE_VERSION in src/node_version.h
 %global nodejs_soversion 108
 %global nodejs_abi %{nodejs_soversion}
@@ -65,7 +65,7 @@
 
 # c-ares - from deps/cares/include/ares_version.h
 # https://github.com/nodejs/node/pull/9332
-%global c_ares_version 1.19.1
+%global c_ares_version 1.20.1
 
 # llhttp - from deps/llhttp/include/llhttp.h
 %global llhttp_version 6.0.11
@@ -97,7 +97,7 @@
 
 # npm - from deps/npm/package.json
 %global npm_epoch 1
-%global npm_version 9.8.1
+%global npm_version 10.2.3
 
 # In order to avoid needing to keep incrementing the release version for the
 # main package forever, we will just construct one for npm that is guaranteed
@@ -108,7 +108,7 @@
 %global npm_envr %{npm_epoch}:%{npm_version}-%{npm_release}
 
 # uvwasi - from deps/uvwasi/include/uvwasi.h
-%global uvwasi_version 0.0.18
+%global uvwasi_version 0.0.19
 
 # histogram_c - assumed from timestamps
 %global histogram_version 0.9.7
@@ -145,7 +145,7 @@ Source203: v8.pc.in
 # These are generated by nodejs-sources.sh
 Source101: cjs-module-lexer-1.2.2-stripped.tar.gz
 Source102: wasi-sdk-11.0-linux.tar.gz
-Source111: undici-5.26.3-stripped.tar.gz
+Source111: undici-5.26.4-stripped.tar.gz
 Source112: wasi-sdk-20.0-linux.tar.gz
 
 Patch: 0001-Fedora-specific-patches.patch
@@ -314,7 +314,7 @@ Provides: bundled(histogram) = %{histogram_version}
 
 # Upstream has added a new URL parser that has no option to build as a shared
 # library (19.7.0+)
-Provides: bundled(ada) = 2.6.0
+Provides: bundled(ada) = 2.7.2
 
 
 %unversioned_obsoletes_of_nodejsXX_if_default
diff --git a/sources b/sources
index 6306cfc..62e380f 100644
--- a/sources
+++ b/sources
@@ -1,7 +1,7 @@
-SHA512 (node-v18.18.2-stripped.tar.gz) = bb36ffff9cac15d93771b5cc1fd5f3767ee1f315264596b31dc8476b637a202b9e00f5dcca1e39b94146fa2def78cd919b6c9a3d5454bdf8b051520065239477
+SHA512 (node-v18.19.0-stripped.tar.gz) = c7bad22d4b6b24335f2032a5b01529992bb454fc1bb02c57324472438e958205a60d7a91ffc21550e2d69cebea07305cd43fbd997ec691cb163544c287721952
 SHA512 (icu4c-73_2-data-bin-b.zip) = 8512947da7b2a927627abed6bd7e04218cd4fcd02d44eb72a82ffa87aedabfc3be5d3152e9fba33a769ef35e2db55764c2ab8f5bd65b4e89aa9c15b33392e078
 SHA512 (icu4c-73_2-data-bin-l.zip) = 420c2f5090927dab13f5449da3b0ec7bf86a91ea8723f177aca2907a8eea9bcb4c3475b66c54355ae320001813db57a00afdab00bd85b8c36d39adedcab80bfc
-SHA512 (cjs-module-lexer-1.2.2-stripped.tar.gz) = b6321404e47ff41c92bf164f0d3bdb3071a302c583883a9a3ee9de78a6751fc61c52b9732c164aaef857840b22145ef3d3ade319265bdd739c22dc899318090c
+SHA512 (cjs-module-lexer-1.2.2-stripped.tar.gz) = 5a6ccb2d807bafe17be7c34615b498d54ccdbc04faf3e21da28c721b0d4c9a2962275c3edacbec9e05ea83958fefc226d66183ba2dfc56988d2f2b607889bfd0
 SHA512 (wasi-sdk-11.0-linux.tar.gz) = e3ed4597f7f2290967eef6238e9046f60abbcb8633a4a2a51525d00e7393df8df637a98a5b668217d332dd44fcbf2442ec7efd5e65724e888d90611164451e20
-SHA512 (undici-5.26.3-stripped.tar.gz) = 94a568a6c1aad93d8085716d31804360bf26c4d943a34381a30491917d0c274765dbcdf62a26bda7064a5db3fae522ce6bca2d65af1ba3bc5627e359c4cdf27e
+SHA512 (undici-5.26.4-stripped.tar.gz) = 2a72a432cdcb22a63e9d498079149b4a01226c96ec04c0e4a37436d4dfdcad250054f3b847d3c6f568d1fe50a05e34c77734f406869efdfdaca75f89090ef640
 SHA512 (wasi-sdk-20.0-linux.tar.gz) = ff3d368267526887534f50767ff010bd368e9c24178ab2f0cf57a8ed0b3a82fbf85986d620ab2327ac6bb3f456c65adc6edb80626a1289e630dde7e43b191b42