diff --git a/dotnet-8.0.126.tar.gz.sig b/dotnet-8.0.126.tar.gz.sig
deleted file mode 100644
index 2d8d1235415735791b4246c616a4a1a4e450efe1..0000000000000000000000000000000000000000
--- a/dotnet-8.0.126.tar.gz.sig
+++ /dev/null
@@ -1,17 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: BSN Pgp v1.0.0.0
-
-iQIcBAABCAAGBQJp3n7WAAoJEP2/U8JNtIcuQVcQAMRc9bKoZ9fZIUal2rXZCy0+
-QVJwUlW4iQNPo4Xb1gGzRp1WXrsSw1lAAHWkerqpkwPBbCfpTJeRS/F7QQlg4RHy
-SUH75ifwX0zJH9jhHHhXnPJG7EbFczHSa1vfLWQjWmOh8a+HBnOhGy41oakSxMyG
-Jvg+sQ/sC/23XGQcuV6iAxTPQl10yNR6+DVjA6adKQik+k2MRZDjmy3+dxLe0YZV
-xO6dA9d+8Qjjt2VZvDeZ5g4fg2feuNTvMgMEu9ffSluQV8wgme6sYDMsAJzQJFQj
-s3oMEdFZg31cuEGtQ9yV84SAl1Jp2e915wtnWQdeRPD/1PBBcfTm8PRjPKFDg1Oz
-49UDv3Dgzlz4HztvnjT+bQTh4fRVcLbojGZTkGU62H3FdrSU2QzI31auatvkyvXu
-LVBKUbl1JSffr6juAkjCExZCdAPYQYJdwCwu23Us/Nq6NJrozKHohu2hXgfPLGK2
-ej0HnePzX/5+ySHQKb0awc7DskdE4yI9U7pf9fDn98bE46Eyr2BrBCLJgqGnJsVR
-IyIX+08b67C1285K6fbDoYISLVDW3kFWKyGCA2hWqGc8wcB2YOjPdh1Wz1dCnoQZ
-DBHfuaRQGGs0mAd6CYGZf9F0OtpGGWcqOeZXasiJd2ZXaOCWw0zX3ghuRBFRqR+M
-bhtBaEHc9zV+4InT3Cqb
-=eiwY
------END PGP SIGNATURE-----
diff --git a/dotnet-8.0.129.tar.gz.sig b/dotnet-8.0.129.tar.gz.sig
new file mode 100644
index 0000000000000000000000000000000000000000..c073b6d8012a31d87b5221cb3cd4f5ff1af4ce22
--- /dev/null
+++ b/dotnet-8.0.129.tar.gz.sig
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: BSN Pgp v1.0.0.0
+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+=u+o5
+-----END PGP SIGNATURE-----
diff --git a/dotnet8.0.spec b/dotnet8.0.spec
index 6e8705472e917fe59c199d51435bf1bae6f1d8a6..6e27c8ff2575bc3cb7e24329eb451d13f5e623b0 100644
--- a/dotnet8.0.spec
+++ b/dotnet8.0.spec
@@ -12,16 +12,16 @@
 # dotnet-host and netstandard-targeting-pack-2.1
 %global is_latest_dotnet 0
 
-%global host_version 8.0.26
-%global runtime_version 8.0.26
-%global aspnetcore_runtime_version 8.0.26
-%global sdk_version 8.0.126
+%global host_version 8.0.29
+%global runtime_version 8.0.29
+%global aspnetcore_runtime_version 8.0.29
+%global sdk_version 8.0.129
 %global sdk_feature_band_version %(echo %{sdk_version} | cut -d '-' -f 1 | sed -e 's|[[:digit:]][[:digit:]]$|00|')
 %global templates_version %{runtime_version}
 #%%global templates_version %%(echo %%{runtime_version} | awk 'BEGIN { FS="."; OFS="." } {print $1, $2, $3+1 }')
 
 # upstream can produce releases with a different tag than the SDK version
-%global upstream_tag v8.0.126
+%global upstream_tag v8.0.129
 %global upstream_tag_without_v %(echo %{upstream_tag} | sed -e 's|^v||')
 
 %global host_rpm_version %{host_version}
@@ -666,6 +666,10 @@ export COMPlus_LTTng=0
 
 
 %changelog
+* Thu Aug 6 2026 PkgAgent Robot <pkgagent@opencloudos.tech> - 8.0.129-1
+- [Type] security
+- [DESC] Update to .NET SDK 8.0.129 and Runtime 8.0.29 (fixes CVE-2026-57108)
+
 * Wed May 6 2026 Jiaxin Yang <jiaxinyyang@tencent.com> - 8.0.126-1
 - [Type] sync
 - [DESC] Update to .NET SDK 8.0.126 and Runtime 8.0.26.
\ No newline at end of file
diff --git a/release.json b/release.json
index 97e98b9469ded380882d6276e6dff92a2d0e8c91..5afd451164e2f569b2ad06a3583f6cc4f591a96a 100644
--- a/release.json
+++ b/release.json
@@ -1,10 +1,10 @@
 {
-  "release": "8.0.26",
+  "release": "8.0.29",
   "channel": "8.0",
-  "tag": "v8.0.126",
-  "sdkVersion": "8.0.126",
-  "runtimeVersion": "8.0.26",
-  "aspNetCoreVersion": "8.0.26",
+  "tag": "v8.0.129",
+  "sdkVersion": "8.0.129",
+  "runtimeVersion": "8.0.29",
+  "aspNetCoreVersion": "8.0.29",
   "sourceRepository": "https://github.com/dotnet/dotnet",
-  "sourceVersion": "9096b5d74cb74ee028c10649c93e98c8c25ec687"
+  "sourceVersion": "761968561827fbf9fd55e1259e7e0963b1a5613a"
 }
diff --git a/sources b/sources
index 2664612d2b7871b3ffceba6478f400389520d3ad..3f8a5f4c0ad75e0e10097fcaf066df025429edcf 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (dotnet-8.0.126.tar.gz) = 6f5e6bba3a7a3854ff9e3bec12e1e63557d9273f61c96c49ffca1518c87956cbc79f6ee8faf25df29c846e5e4b1908bc1855d608172bf457c063531349832e0e
+SHA512 (dotnet-8.0.129.tar.gz) = 4b81d3f9d6d3ce54254dd70bd92e877cce5e044e2a0b362f5b893b5fa21e42141cf5809a03b1c7e4c91486820ebf749b4fbc0c738e4bc37315d7581f152261dc