diff --git a/.gitignore b/.gitignore
index 7d97139..9800658 100644
--- a/.gitignore
+++ b/.gitignore
@@ -25,3 +25,4 @@ newrelease.conf
 /kubernetes-bc401b9.tar.gz
 /kubernetes-1.29.1.tar.gz
 /kubernetes-1.29.2.tar.gz
+/kubernetes-1.29.3.tar.gz
diff --git a/kubernetes.spec b/kubernetes.spec
index 9a54c07..08884b4 100644
--- a/kubernetes.spec
+++ b/kubernetes.spec
@@ -20,12 +20,12 @@
 
 # **** release metadata ****
 # populated by envsubst in newrelease.sh
-%global gittag                  v1.29.2
-%global tar_ver                 1.29.2
+%global gittag                  v1.29.3
+%global tar_ver                 1.29.3
 %global k8s_name                kubernetes
-%global k8s_ver                 1.29.2
+%global k8s_ver                 1.29.3
 # golang 'built with' version
-%global golangver               1.21.7
+%global golangver               1.21.8
 
 # last release version of these rpms prior to F40 restructure
 # should not change once restructure goes into rawhide
@@ -227,9 +227,6 @@ export KUBE_GIT_TREE_STATE="clean"
 export KUBE_GIT_VERSION=v%{version}
 export KUBE_EXTRA_GOPATH=$(pwd)/Godeps/_workspace
 
-# macro that executes make all for given cmd argument
-%define makecmd(o:) make all WHAT="cmd/%1" GOLDFLAGS="-B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \\n') $GLINK"
-
 # go internal linker does not provide build ids; use
 # KUBE_CGO_OVERRIDES to force external linker; consistent
 # with Fedora go standards
@@ -242,6 +239,9 @@ export GOFLAGS="-buildmode=pie -compiler=gc -tags=rpm_crashtraceback${BUILDTAGS:
 # define temporary linker options for use in GOLDFLAGS
 GLINK="-compressdwarf=false -linkmode=external -extldflags '%{build_ldflags}'"
 
+# macro that executes make all for given cmd argument
+%define makecmd(o:) make all WHAT="cmd/%1" GOLDFLAGS="-B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \\n') $GLINK"
+
 # Build each binary separately to generate a unique build-id.
 # Otherwise: Duplicate build-ids /builddir/build/BUILDROOT/.../usr/bin/kube-apiserver and /builddir/build/BUILDROOT/.../usr/bin/kubeadm
 %makecmd kube-proxy
diff --git a/sources b/sources
index 3bbe600..5d7c419 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (kubernetes-1.29.2.tar.gz) = 8358890bd1769492c686abf938981eedc3b98d742dfc85ccd8799531ff78418cf26a611c84d1bbc610e942ade7c4fffdd146113e642f948d0f0b917558a4f47a
+SHA512 (kubernetes-1.29.3.tar.gz) = 853b7d38c850780a5e39fcb817012b35eea91b62d055f6611aba8f14cd7f6c176a047dc7e79ecc11d3bd7815f3ececb26b8e5d419124c03c4aecf6f0670ca603