diff --git a/meta-forgefirm/recipes-forgefirm/forgectrl/forgectrl-pin.inc b/meta-forgefirm/recipes-forgefirm/forgectrl/forgectrl-pin.inc
index 6fb3db2..b43204c 100644
--- a/meta-forgefirm/recipes-forgefirm/forgectrl/forgectrl-pin.inc
+++ b/meta-forgefirm/recipes-forgefirm/forgectrl/forgectrl-pin.inc
@@ -2,5 +2,5 @@
 # only SRCREV and PV here - the image manifest leaves *-pin.inc out of the
 # layer content hash because the component entry already identifies the
 # pinned source (forgefirm-image-manifest.bbclass).
-SRCREV = "67fd8bd96c8a8b960422b750addc21e93779476f"
+SRCREV = "cb860dc607fa9f37f90548feb05f534da77a956b"
 PV = "0.1.0"
diff --git a/meta-forgefirm/recipes-forgefirm/forgefirm-app/forgefirm-app-pin.inc b/meta-forgefirm/recipes-forgefirm/forgefirm-app/forgefirm-app-pin.inc
index bec9983..929e4ff 100644
--- a/meta-forgefirm/recipes-forgefirm/forgefirm-app/forgefirm-app-pin.inc
+++ b/meta-forgefirm/recipes-forgefirm/forgefirm-app/forgefirm-app-pin.inc
@@ -4,9 +4,9 @@
 # because the component entry already identifies the pinned source
 # (forgefirm-image-manifest.bbclass). The python3-gfhardware recipe in
 # meta-glowforge-bsp pins the same repository; move both together.
-SRCREV = "37854f020dfe7d2ff5541de63cc546a2eb5751d1"
+SRCREV = "81500ae5aed3d20a7079145c5af3c68a22cd5a48"
 
 # Bump PV with every SRCREV move: the hash-derived package version is not
 # monotonic on its own and buildhistory QA fails the build when it sorts
 # backwards.
-PV = "0.1.8+git"
+PV = "0.1.9+git"