diff --git a/MODULE.bazel.lock b/MODULE.bazel.lock
index 885b2ddf3a4a57..344fb88b92dfa9 100644
--- a/MODULE.bazel.lock
+++ b/MODULE.bazel.lock
@@ -137,6 +137,7 @@
     "https://bcr.bazel.build/modules/rules_cc/0.1.1/MODULE.bazel": "2f0222a6f229f0bf44cd711dc13c858dad98c62d52bd51d8fc3a764a83125513",
     "https://bcr.bazel.build/modules/rules_cc/0.1.5/MODULE.bazel": "88dfc9361e8b5ae1008ac38f7cdfd45ad738e4fa676a3ad67d19204f045a1fd8",
     "https://bcr.bazel.build/modules/rules_cc/0.2.0/MODULE.bazel": "b5c17f90458caae90d2ccd114c81970062946f49f355610ed89bebf954f5783c",
+    "https://bcr.bazel.build/modules/rules_cc/0.2.13/MODULE.bazel": "eecdd666eda6be16a8d9dc15e44b5c75133405e820f620a234acc4b1fdc5aa37",
     "https://bcr.bazel.build/modules/rules_cc/0.2.17/MODULE.bazel": "1849602c86cb60da8613d2de887f9566a6d354a6df6d7009f9d04a14402f9a84",
     "https://bcr.bazel.build/modules/rules_cc/0.2.17/source.json": "3832f45d145354049137c0090df04629d9c2b5493dc5c2bf46f1834040133a07",
     "https://bcr.bazel.build/modules/rules_cc/0.2.4/MODULE.bazel": "1ff1223dfd24f3ecf8f028446d4a27608aa43c3f41e346d22838a4223980b8cc",
@@ -188,7 +189,6 @@
     "https://bcr.bazel.build/modules/rules_python/0.28.0/MODULE.bazel": "cba2573d870babc976664a912539b320cbaa7114cd3e8f053c720171cde331ed",
     "https://bcr.bazel.build/modules/rules_python/0.4.0/MODULE.bazel": "9208ee05fd48bf09ac60ed269791cf17fb343db56c8226a720fbb1cdf467166c",
     "https://bcr.bazel.build/modules/rules_python/0.40.0/MODULE.bazel": "9d1a3cd88ed7d8e39583d9ffe56ae8a244f67783ae89b60caafc9f5cf318ada7",
-    "https://bcr.bazel.build/modules/rules_python/1.2.0/MODULE.bazel": "5aeeb48b2a6c19d668b48adf2b8a2b209a6310c230db0ce77450f148a89846e4",
     "https://bcr.bazel.build/modules/rules_python/1.7.0/MODULE.bazel": "d01f995ecd137abf30238ad9ce97f8fc3ac57289c8b24bd0bf53324d937a14f8",
     "https://bcr.bazel.build/modules/rules_python/1.9.0/MODULE.bazel": "afc3a05f29f09f2d3ee95ad99a145250dab41a2b2d8d6f82cc91936b3213282c",
     "https://bcr.bazel.build/modules/rules_python/1.9.0/source.json": "3921ea0b65298d51aead5b9e4a82203d7be9b5918619b58b53f1c259f4e63169",
@@ -204,7 +204,6 @@
     "https://bcr.bazel.build/modules/rules_shell/0.3.0/MODULE.bazel": "de4402cd12f4cc8fda2354fce179fdb068c0b9ca1ec2d2b17b3e21b24c1a937b",
     "https://bcr.bazel.build/modules/rules_shell/0.4.0/MODULE.bazel": "0f8f11bb3cd11755f0b48c1de0bbcf62b4b34421023aa41a2fc74ef68d9584f0",
     "https://bcr.bazel.build/modules/rules_shell/0.4.1/MODULE.bazel": "00e501db01bbf4e3e1dd1595959092c2fadf2087b2852d3f553b5370f5633592",
-    "https://bcr.bazel.build/modules/rules_shell/0.5.0/MODULE.bazel": "8c8447370594d45539f66858b602b0bb2cb2d3401a4ebb9ad25830c59c0f366d",
     "https://bcr.bazel.build/modules/rules_shell/0.6.1/MODULE.bazel": "72e76b0eea4e81611ef5452aa82b3da34caca0c8b7b5c0c9584338aa93bae26b",
     "https://bcr.bazel.build/modules/rules_shell/0.6.1/source.json": "20ec05cd5e592055e214b2da8ccb283c7f2a421ea0dc2acbf1aa792e11c03d0c",
     "https://bcr.bazel.build/modules/rules_testing/0.9.0/MODULE.bazel": "d4d9a7367978b5c589437f01dba1dc80ac6f389e9991e1c1edb3c8207526ca83",
diff --git a/compliance/package_licenses.bzl b/compliance/package_licenses.bzl
index 4d2631bcc0a2a6..c51198757beea7 100644
--- a/compliance/package_licenses.bzl
+++ b/compliance/package_licenses.bzl
@@ -69,7 +69,7 @@ def package_licenses(name = None, src = None):
             # Windows build; offers_dir is therefore always empty there. rules_python 1.9.0 makes `bazel run` copy
             # runfiles to a fresh temp dir and skips empty dirs, causing pkg_install to fail with FileNotFoundError
             # (Linux/macOS use symlinks so empty TreeArtifacts are fine); remove this select when Windows does.
-            "@platforms//os:windows": [],  #TODO(agent-build): remove `select` when Windows deps use ship_source_offer
+            "@platforms//os:windows": [],  #TODO(ABLD-351): deal with products that don't have source offers
             "//conditions:default": [":%s_offer_dir_stripped_" % name],
         }),
         visibility = ["//visibility:public"],
diff --git a/deps/repos.MODULE.bazel b/deps/repos.MODULE.bazel
index c87e4c5d4be4b5..05cb80cabff8e4 100644
--- a/deps/repos.MODULE.bazel
+++ b/deps/repos.MODULE.bazel
@@ -73,18 +73,20 @@ http_archive(
 )
 
 # Defines a "rules_foreign_cc" target to build openssl
-# Pinned to main commit e4068330a799ba6090d8247cf34d470f722b32c4 to get:
+# Pinned to main commit 2373ac51627f05029b0068884c93fa82a11df400 to get:
 # - bazel-contrib/rules_foreign_cc#1451: out_data_dirs in output groups
 # - bazel-contrib/rules_foreign_cc#1465: resource_set integration (fixes overcommitting)
-# - bazel-contrib/rules_foreign_cc#1470: -isystem forwarding to configure scripts
-# Patch 0002 is still carried locally (bazel-contrib/rules_foreign_cc#1452 not yet merged).
+# - bazel-contrib/rules_foreign_cc#1493: load CcSharedLibraryInfo from rules_cc (Bazel 9)
+# - bazel-contrib/rules_foreign_cc#1492: bump bazel_skylib_gazelle_plugin to 1.9.0 (Bazel 9)
 bazel_dep(name = "rules_foreign_cc", version = "0.15.1")
 git_override(
     module_name = "rules_foreign_cc",
-    commit = "e4068330a799ba6090d8247cf34d470f722b32c4",
+    commit = "2373ac51627f05029b0068884c93fa82a11df400",
     patch_strip = 1,
     patches = [
+        # https://github.com/bazel-contrib/rules_foreign_cc/pull/1452
         "//bazel/patches:rules_foreign_cc/0002-configure_make-provide-DY-LD_LIBRARY_PATH-based-on-t.patch",
+        # https://github.com/bazel-contrib/rules_foreign_cc/pull/1491
         "//bazel/patches:rules_foreign_cc/0003-pass-j-flag-directly-on-make-command-line.patch",
     ],
     remote = "https://github.com/bazel-contrib/rules_foreign_cc",