diff --git a/core/testing/MODULE.bazel b/core/testing/MODULE.bazel
index cea5b4c0e..3a46e39b4 100644
--- a/core/testing/MODULE.bazel
+++ b/core/testing/MODULE.bazel
@@ -10,4 +10,4 @@ nix_pkg = use_extension("@rules_nixpkgs_core//extensions:package.bzl", "nix_pkg"
 nix_pkg.default(attr = "hello")
 use_repo(nix_pkg, "hello")
 
-bazel_dep(name = "bazel_skylib", version = "1.7.1")
+bazel_dep(name = "bazel_skylib", version = "1.9.0")
diff --git a/examples/cc-template/MODULE.bazel b/examples/cc-template/MODULE.bazel
index 4073b0b09..d79d5a617 100644
--- a/examples/cc-template/MODULE.bazel
+++ b/examples/cc-template/MODULE.bazel
@@ -32,5 +32,5 @@ local_path_override(
 
 # TODO remove transitive rules_nixpkgs_cc dependencies.
 #   Once there is a module extension for the cc toolchain.
-bazel_dep(name = "bazel_skylib", version = "1.7.1")
+bazel_dep(name = "bazel_skylib", version = "1.9.0")
 bazel_dep(name = "rules_cc", version = "0.0.9")
diff --git a/testing/cc/MODULE.bazel b/testing/cc/MODULE.bazel
index 006aa26e5..4ca893fe4 100644
--- a/testing/cc/MODULE.bazel
+++ b/testing/cc/MODULE.bazel
@@ -18,7 +18,7 @@ local_path_override(
     path = "../../toolchains/java",
 )
 
-bazel_dep(name = "bazel_skylib", version = "1.7.1")
+bazel_dep(name = "bazel_skylib", version = "1.9.0")
 bazel_dep(name = "rules_cc", version = "0.0.9")
 
 # TODO[AH] Remove these transitive dependencies once nixpkgs_java_configure has
diff --git a/testing/cc/WORKSPACE b/testing/cc/WORKSPACE
index f98534dc8..fc7044ee2 100644
--- a/testing/cc/WORKSPACE
+++ b/testing/cc/WORKSPACE
@@ -19,10 +19,10 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 
 http_archive(
     name = "bazel_skylib",
-    sha256 = "bc283cdfcd526a52c3201279cda4bc298652efa898b10b4db0837dc51652756f",
+    sha256 = "3b5b49006181f5f8ff626ef8ddceaa95e9bb8ad294f7b5d7b11ea9f7ddaf8c59",
     urls = [
-        "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.7.1/bazel-skylib-1.7.1.tar.gz",
-        "https://github.com/bazelbuild/bazel-skylib/releases/download/1.7.1/bazel-skylib-1.7.1.tar.gz",
+        "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.9.0/bazel-skylib-1.9.0.tar.gz",
+        "https://github.com/bazelbuild/bazel-skylib/releases/download/1.9.0/bazel-skylib-1.9.0.tar.gz",
     ],
 )
 
diff --git a/testing/core/MODULE.bazel b/testing/core/MODULE.bazel
index 2392edfe3..b9299433f 100644
--- a/testing/core/MODULE.bazel
+++ b/testing/core/MODULE.bazel
@@ -12,7 +12,7 @@ local_path_override(
     path = "tests/intermediate_module",
 )
 
-bazel_dep(name = "bazel_skylib", version = "1.7.1")
+bazel_dep(name = "bazel_skylib", version = "1.9.0")
 bazel_dep(name = "nixpkgs_location_expansion_test_file")
 local_path_override(
     module_name = "nixpkgs_location_expansion_test_file",
diff --git a/testing/core/WORKSPACE b/testing/core/WORKSPACE
index 566ec9fb1..3ee67029d 100644
--- a/testing/core/WORKSPACE
+++ b/testing/core/WORKSPACE
@@ -9,10 +9,10 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 
 http_archive(
     name = "bazel_skylib",
-    sha256 = "bc283cdfcd526a52c3201279cda4bc298652efa898b10b4db0837dc51652756f",
+    sha256 = "3b5b49006181f5f8ff626ef8ddceaa95e9bb8ad294f7b5d7b11ea9f7ddaf8c59",
     urls = [
-        "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.7.1/bazel-skylib-1.7.1.tar.gz",
-        "https://github.com/bazelbuild/bazel-skylib/releases/download/1.7.1/bazel-skylib-1.7.1.tar.gz",
+        "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.9.0/bazel-skylib-1.9.0.tar.gz",
+        "https://github.com/bazelbuild/bazel-skylib/releases/download/1.9.0/bazel-skylib-1.9.0.tar.gz",
     ],
 )
 
diff --git a/testing/core/WORKSPACE.bzlmod b/testing/core/WORKSPACE.bzlmod
index 180f436d1..cbc8cd125 100644
--- a/testing/core/WORKSPACE.bzlmod
+++ b/testing/core/WORKSPACE.bzlmod
@@ -23,10 +23,10 @@ http_archive(
 
 http_archive(
     name = "bazel_skylib",
-    sha256 = "bc283cdfcd526a52c3201279cda4bc298652efa898b10b4db0837dc51652756f",
+    sha256 = "3b5b49006181f5f8ff626ef8ddceaa95e9bb8ad294f7b5d7b11ea9f7ddaf8c59",
     urls = [
-        "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.7.1/bazel-skylib-1.7.1.tar.gz",
-        "https://github.com/bazelbuild/bazel-skylib/releases/download/1.7.1/bazel-skylib-1.7.1.tar.gz",
+        "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.9.0/bazel-skylib-1.9.0.tar.gz",
+        "https://github.com/bazelbuild/bazel-skylib/releases/download/1.9.0/bazel-skylib-1.9.0.tar.gz",
     ],
 )
 
diff --git a/testing/go-workspace/WORKSPACE b/testing/go-workspace/WORKSPACE
index 66eecc6cf..68f33f570 100644
--- a/testing/go-workspace/WORKSPACE
+++ b/testing/go-workspace/WORKSPACE
@@ -37,10 +37,10 @@ go_rules_dependencies()
 
 http_archive(
     name = "bazel_skylib",
-    sha256 = "bc283cdfcd526a52c3201279cda4bc298652efa898b10b4db0837dc51652756f",
+    sha256 = "3b5b49006181f5f8ff626ef8ddceaa95e9bb8ad294f7b5d7b11ea9f7ddaf8c59",
     urls = [
-        "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.7.1/bazel-skylib-1.7.1.tar.gz",
-        "https://github.com/bazelbuild/bazel-skylib/releases/download/1.7.1/bazel-skylib-1.7.1.tar.gz",
+        "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.9.0/bazel-skylib-1.9.0.tar.gz",
+        "https://github.com/bazelbuild/bazel-skylib/releases/download/1.9.0/bazel-skylib-1.9.0.tar.gz",
     ],
 )
 
diff --git a/testing/java/MODULE.bazel b/testing/java/MODULE.bazel
index f084796da..6dec079bf 100644
--- a/testing/java/MODULE.bazel
+++ b/testing/java/MODULE.bazel
@@ -18,7 +18,7 @@ local_path_override(
     path = "../../toolchains/java",
 )
 
-bazel_dep(name = "bazel_skylib", version = "1.7.1")
+bazel_dep(name = "bazel_skylib", version = "1.9.0")
 bazel_dep(name = "rules_cc", version = "0.0.9")
 
 # TODO[AH] Remove these transitive dependencies once nixpkgs_java_configure has
diff --git a/testing/java/WORKSPACE b/testing/java/WORKSPACE
index e0a02c84c..4db37a937 100644
--- a/testing/java/WORKSPACE
+++ b/testing/java/WORKSPACE
@@ -31,10 +31,10 @@ http_archive(
 
 http_archive(
     name = "bazel_skylib",
-    sha256 = "bc283cdfcd526a52c3201279cda4bc298652efa898b10b4db0837dc51652756f",
+    sha256 = "3b5b49006181f5f8ff626ef8ddceaa95e9bb8ad294f7b5d7b11ea9f7ddaf8c59",
     urls = [
-        "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.7.1/bazel-skylib-1.7.1.tar.gz",
-        "https://github.com/bazelbuild/bazel-skylib/releases/download/1.7.1/bazel-skylib-1.7.1.tar.gz",
+        "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.9.0/bazel-skylib-1.9.0.tar.gz",
+        "https://github.com/bazelbuild/bazel-skylib/releases/download/1.9.0/bazel-skylib-1.9.0.tar.gz",
     ],
 )
 
diff --git a/testing/posix/MODULE.bazel b/testing/posix/MODULE.bazel
index 0b4cc9e6f..a83878756 100644
--- a/testing/posix/MODULE.bazel
+++ b/testing/posix/MODULE.bazel
@@ -18,7 +18,7 @@ local_path_override(
     path = "../../toolchains/java",
 )
 
-bazel_dep(name = "bazel_skylib", version = "1.7.1")
+bazel_dep(name = "bazel_skylib", version = "1.9.0")
 bazel_dep(name = "rules_sh", version = "0.5.0")
 
 # TODO[AH] Remove these transitive dependencies once nixpkgs_java_configure has
diff --git a/testing/posix/WORKSPACE b/testing/posix/WORKSPACE
index 85a8c6995..07908eebd 100644
--- a/testing/posix/WORKSPACE
+++ b/testing/posix/WORKSPACE
@@ -19,10 +19,10 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 
 http_archive(
     name = "bazel_skylib",
-    sha256 = "bc283cdfcd526a52c3201279cda4bc298652efa898b10b4db0837dc51652756f",
+    sha256 = "3b5b49006181f5f8ff626ef8ddceaa95e9bb8ad294f7b5d7b11ea9f7ddaf8c59",
     urls = [
-        "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.7.1/bazel-skylib-1.7.1.tar.gz",
-        "https://github.com/bazelbuild/bazel-skylib/releases/download/1.7.1/bazel-skylib-1.7.1.tar.gz",
+        "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.9.0/bazel-skylib-1.9.0.tar.gz",
+        "https://github.com/bazelbuild/bazel-skylib/releases/download/1.9.0/bazel-skylib-1.9.0.tar.gz",
     ],
 )
 
diff --git a/testing/python/MODULE.bazel b/testing/python/MODULE.bazel
index e05d68e99..d91984ca8 100644
--- a/testing/python/MODULE.bazel
+++ b/testing/python/MODULE.bazel
@@ -24,7 +24,7 @@ local_path_override(
     path = "../../toolchains/cc",
 )
 
-bazel_dep(name = "bazel_skylib", version = "1.7.1")
+bazel_dep(name = "bazel_skylib", version = "1.9.0")
 bazel_dep(name = "rules_cc", version = "0.0.9")
 
 # TODO[AH] Remove these transitive dependencies once nixpkgs_java_configure has
diff --git a/testing/python/WORKSPACE b/testing/python/WORKSPACE
index 74e8604f2..84ffc2f61 100644
--- a/testing/python/WORKSPACE
+++ b/testing/python/WORKSPACE
@@ -24,10 +24,10 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 
 http_archive(
     name = "bazel_skylib",
-    sha256 = "bc283cdfcd526a52c3201279cda4bc298652efa898b10b4db0837dc51652756f",
+    sha256 = "3b5b49006181f5f8ff626ef8ddceaa95e9bb8ad294f7b5d7b11ea9f7ddaf8c59",
     urls = [
-        "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.7.1/bazel-skylib-1.7.1.tar.gz",
-        "https://github.com/bazelbuild/bazel-skylib/releases/download/1.7.1/bazel-skylib-1.7.1.tar.gz",
+        "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.9.0/bazel-skylib-1.9.0.tar.gz",
+        "https://github.com/bazelbuild/bazel-skylib/releases/download/1.9.0/bazel-skylib-1.9.0.tar.gz",
     ],
 )
 
diff --git a/testing/rust/MODULE.bazel b/testing/rust/MODULE.bazel
index 6d252ee90..4eeb482a1 100644
--- a/testing/rust/MODULE.bazel
+++ b/testing/rust/MODULE.bazel
@@ -24,7 +24,7 @@ local_path_override(
     path = "../../toolchains/java",
 )
 
-bazel_dep(name = "bazel_skylib", version = "1.7.1")
+bazel_dep(name = "bazel_skylib", version = "1.9.0")
 bazel_dep(name = "rules_cc", version = "0.0.9")
 bazel_dep(name = "rules_rust", version = "0.56.0")
 
diff --git a/testing/rust/WORKSPACE b/testing/rust/WORKSPACE
index 62cbee81b..3b9bcbbc2 100644
--- a/testing/rust/WORKSPACE
+++ b/testing/rust/WORKSPACE
@@ -24,10 +24,10 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 
 http_archive(
     name = "bazel_skylib",
-    sha256 = "bc283cdfcd526a52c3201279cda4bc298652efa898b10b4db0837dc51652756f",
+    sha256 = "3b5b49006181f5f8ff626ef8ddceaa95e9bb8ad294f7b5d7b11ea9f7ddaf8c59",
     urls = [
-        "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.7.1/bazel-skylib-1.7.1.tar.gz",
-        "https://github.com/bazelbuild/bazel-skylib/releases/download/1.7.1/bazel-skylib-1.7.1.tar.gz",
+        "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.9.0/bazel-skylib-1.9.0.tar.gz",
+        "https://github.com/bazelbuild/bazel-skylib/releases/download/1.9.0/bazel-skylib-1.9.0.tar.gz",
     ],
 )
 
diff --git a/toolchains/nodejs/testing/MODULE.bazel b/toolchains/nodejs/testing/MODULE.bazel
index 075b4f045..8312c7c89 100644
--- a/toolchains/nodejs/testing/MODULE.bazel
+++ b/toolchains/nodejs/testing/MODULE.bazel
@@ -24,7 +24,7 @@ local_path_override(
     path = "../../java",
 )
 
-bazel_dep(name = "bazel_skylib", version = "1.7.1")
+bazel_dep(name = "bazel_skylib", version = "1.9.0")
 bazel_dep(name = "rules_cc", version = "0.0.9")
 bazel_dep(name = "rules_nodejs", version = "6.3.0")
 
diff --git a/toolchains/nodejs/testing/WORKSPACE b/toolchains/nodejs/testing/WORKSPACE
index be78c64d3..a7a28f679 100644
--- a/toolchains/nodejs/testing/WORKSPACE
+++ b/toolchains/nodejs/testing/WORKSPACE
@@ -39,10 +39,10 @@ register_coreutils_toolchains()
 
 http_archive(
     name = "bazel_skylib",
-    sha256 = "bc283cdfcd526a52c3201279cda4bc298652efa898b10b4db0837dc51652756f",
+    sha256 = "3b5b49006181f5f8ff626ef8ddceaa95e9bb8ad294f7b5d7b11ea9f7ddaf8c59",
     urls = [
-        "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.7.1/bazel-skylib-1.7.1.tar.gz",
-        "https://github.com/bazelbuild/bazel-skylib/releases/download/1.7.1/bazel-skylib-1.7.1.tar.gz",
+        "https://mirror.bazel.build/github.com/bazelbuild/bazel-skylib/releases/download/1.9.0/bazel-skylib-1.9.0.tar.gz",
+        "https://github.com/bazelbuild/bazel-skylib/releases/download/1.9.0/bazel-skylib-1.9.0.tar.gz",
     ],
 )