diff --git a/changelog/bugfixes/2025-06-12-extend-fs.md b/changelog/bugfixes/2025-06-12-extend-fs.md
new file mode 100644
index 0000000000..e7e70822d4
--- /dev/null
+++ b/changelog/bugfixes/2025-06-12-extend-fs.md
@@ -0,0 +1 @@
+- Fixed race condition in the script that grows the root partition to fill the disk. This bug sometimes caused the operation to not occur. ([init#132](https://github.com/flatcar/init/pull/132))
diff --git a/changelog/changes/2025-06-12-boot-permissions.md b/changelog/changes/2025-06-12-boot-permissions.md
new file mode 100644
index 0000000000..557f807a6e
--- /dev/null
+++ b/changelog/changes/2025-06-12-boot-permissions.md
@@ -0,0 +1 @@
+- `/boot` is now only accessible by the root user for better security. ([Flatcar#296](https://github.com/flatcar/Flatcar/issues/296))
diff --git a/sdk_container/.repo/manifests/mantle-container b/sdk_container/.repo/manifests/mantle-container
index cda795b066..78ed9c5055 100644
--- a/sdk_container/.repo/manifests/mantle-container
+++ b/sdk_container/.repo/manifests/mantle-container
@@ -1 +1 @@
-ghcr.io/flatcar/mantle:git-12a16b4a9703a4a6bef7f6df81fcc49e89aa2b99
+ghcr.io/flatcar/mantle:git-8973b287176276f3abfedb8370f5786156e10e16
diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/coreos-init-0.0.1-r199.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/coreos-init-0.0.1-r200.ebuild
similarity index 100%
rename from sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/coreos-init-0.0.1-r199.ebuild
rename to sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/coreos-init-0.0.1-r200.ebuild
diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/coreos-init-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/coreos-init-9999.ebuild
index 8099d715ca..d1b3f4f941 100644
--- a/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/coreos-init-9999.ebuild
+++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/coreos-init/coreos-init-9999.ebuild
@@ -8,7 +8,7 @@ EGIT_REPO_URI="https://github.com/flatcar/init.git"
 if [[ "${PV}" == 9999 ]]; then
 	KEYWORDS="~amd64 ~arm ~arm64 ~x86"
 else
-	EGIT_COMMIT="ac4adc6903e060d49afd7a527ed1b555e94847f8" # flatcar-master
+	EGIT_COMMIT="dd9cbe449efb7134f885b07b16425eb51fb808a8" # flatcar-master
 	KEYWORDS="amd64 arm arm64 x86"
 fi