diff --git a/.chromium.metadata b/.chromium.metadata
index c3f4ffc1..100c8175 100644
--- a/.chromium.metadata
+++ b/.chromium.metadata
@@ -1,3 +1,3 @@
-b0b4c63dab16d273a6a9485b1e002390521e6a82  SOURCES/chromium-129.0.6668.70-clean.tar.xz
+d5944133e143eb2d1f4936803f5bc4e5d62a5f07  SOURCES/chromium-129.0.6668.89-clean.tar.xz
 7e5d2c7864c5c83ec789b59c77cd9c20d2594916  SOURCES/linux-arm64-0.19.2.tgz
 dea187019741602d57aaf189a80abba261fbd2aa  SOURCES/linux-x64-0.19.2.tgz
diff --git a/.gitignore b/.gitignore
index e55e61f5..0bcb3fde 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,3 @@
-SOURCES/chromium-129.0.6668.70-clean.tar.xz
+SOURCES/chromium-129.0.6668.89-clean.tar.xz
 SOURCES/linux-arm64-0.19.2.tgz
 SOURCES/linux-x64-0.19.2.tgz
diff --git a/SOURCES/chromium-127-rust-clanglib.patch b/SOURCES/chromium-127-rust-clanglib.patch
index 55b3ce73..ed4d6c02 100644
--- a/SOURCES/chromium-127-rust-clanglib.patch
+++ b/SOURCES/chromium-127-rust-clanglib.patch
@@ -46,7 +46,7 @@ diff -up chromium-121.0.6167.57/build/config/clang/BUILD.gn.rust-clang_lib chrom
 +          assert(false)  # Unhandled cpu type
 +        }
 +        # different clang lib dir in fedora/epel
-+        if (clang_version == "17" || clang_version == "18") {
++        if (clang_version == "17" || clang_version == "18" || clang_version == "19") {
 +          _suffix = ""
 +        } else if (clang_version == "14" || clang_version == "15" || clang_version == "16") {
 +          _libprefix = "64"
diff --git a/SPECS/chromium.spec b/SPECS/chromium.spec
index 64191569..460a1c39 100644
--- a/SPECS/chromium.spec
+++ b/SPECS/chromium.spec
@@ -273,7 +273,7 @@
 %endif
 
 Name:	chromium%{chromium_channel}
-Version: 129.0.6668.70
+Version: 129.0.6668.89
 Release: 1%{?dist}
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
@@ -1915,6 +1915,18 @@ getent group chrome-remote-desktop >/dev/null || groupadd -r chrome-remote-deskt
 %endif
 
 %changelog
+* Wed Oct 02 2024 Than Ngo <than@redhat.com> - 129.0.6668.89-1
+- update to 129.0.6668.89
+  * High CVE -2024-7025: Integer overflow in Layout
+  * High CVE-2024-9369: Insufficient data validation in Mojo
+  * High CVE-2024-9370: Inappropriate implementation in V8
+
+* Mon Sep 30 2024 Than Ngo <than@redhat.com> - 129.0.6668.70-3
+- add clang-19 support
+
+* Fri Sep 27 2024 Dominik Mierzejewski <dominik@greysector.net> - 129.0.6668.70-2
+- Rebuilt for FFmpeg 7
+
 * Wed Sep 25 2024 Than Ngo <than@redhat.com> - 129.0.6668.70-1
 - update to 129.0.6668.70
   * High CVE-2024-9120: Use after free in Dawn