diff --git a/dns/knot3/distinfo b/dns/knot3/distinfo
index bd5ceac3a53f..9d223ffa2eb9 100644
--- a/dns/knot3/distinfo
+++ b/dns/knot3/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1753790401
-SHA256 (knot-3.4.8.tar.xz) = 6730a73dbfc12d79d8000ffe22d36d068b7467e74bee1eb122ac4935ecea49f9
-SIZE (knot-3.4.8.tar.xz) = 1656224
+TIMESTAMP = 1758802847
+SHA256 (knot-3.5.0.tar.xz) = d52538bf7364c280999dec58c2a02a405dd922ef5794da1473ca7c3cf7f01277
+SIZE (knot-3.5.0.tar.xz) = 1716348
diff --git a/dns/knot3/distinfo.py-libknot b/dns/knot3/distinfo.py-libknot
index 98532a7ad8a2..c26b05b5299c 100644
--- a/dns/knot3/distinfo.py-libknot
+++ b/dns/knot3/distinfo.py-libknot
@@ -1,3 +1,3 @@
-TIMESTAMP = 1753792363
-SHA256 (libknot-3.4.8.tar.gz) = 9900078c7048e264e6e17e7893315183b715e36fc092d450c8d776813fa7d0a5
-SIZE (libknot-3.4.8.tar.gz) = 16803
+TIMESTAMP = 1758802862
+SHA256 (libknot-3.5.0.tar.gz) = f2c58eef495edea9a1362538c4410cdc83abadcdb4f964f663650148f0441649
+SIZE (libknot-3.5.0.tar.gz) = 16785
diff --git a/dns/knot3/knotdns.mk b/dns/knot3/knotdns.mk
index 3265d21b5857..c64c9628dc71 100644
--- a/dns/knot3/knotdns.mk
+++ b/dns/knot3/knotdns.mk
@@ -1 +1 @@
-KNOT_VERSION=	3.4.8
+KNOT_VERSION=	3.5.0
diff --git a/dns/knot3/pkg-plist b/dns/knot3/pkg-plist
index 717315de8099..9444e6567b8c 100644
--- a/dns/knot3/pkg-plist
+++ b/dns/knot3/pkg-plist
@@ -1,118 +1,118 @@
 %%UTILS%%bin/kdig
 %%UTILS%%bin/khost
 %%UTILS%%bin/knsec3hash
 %%UTILS%%bin/knsupdate
 %%UTILS%%bin/kzonecheck
 %%UTILS%%bin/kzonesign
 %%DAEMON%%%%ETCDIR%%/example.com.zone
 %%DAEMON%%%%EXAMPLES%%@sample %%ETCDIR%%/knot.conf.sample
 include/knot/module.h
 include/libdnssec/binary.h
 include/libdnssec/crypto.h
 include/libdnssec/digest.h
 include/libdnssec/dnssec.h
 include/libdnssec/error.h
 include/libdnssec/key.h
 include/libdnssec/keyid.h
 include/libdnssec/keystore.h
 include/libdnssec/keytag.h
 include/libdnssec/nsec.h
 include/libdnssec/pem.h
 include/libdnssec/random.h
 include/libdnssec/sign.h
 include/libdnssec/tsig.h
 include/libdnssec/version.h
 include/libknot/attribute.h
 include/libknot/codes.h
 include/libknot/consts.h
 include/libknot/control/control.h
 include/libknot/cookies.h
 include/libknot/db/db.h
 include/libknot/db/db_lmdb.h
 include/libknot/db/db_trie.h
 include/libknot/descriptor.h
 include/libknot/dname.h
 include/libknot/dynarray.h
 include/libknot/endian.h
 include/libknot/errcode.h
 include/libknot/error.h
 include/libknot/libknot.h
 include/libknot/lookup.h
 include/libknot/mm_ctx.h
 include/libknot/packet/compr.h
 include/libknot/packet/pkt.h
 include/libknot/packet/rrset-wire.h
 include/libknot/packet/wire.h
 include/libknot/probe/data.h
 include/libknot/probe/probe.h
 %%DOQ%%include/libknot/quic/quic.h
 %%DOQ%%include/libknot/quic/quic_conn.h
 %%DOQ%%include/libknot/quic/tls.h
 %%DOQ%%include/libknot/quic/tls_common.h
 include/libknot/rdata.h
 include/libknot/rdataset.h
 include/libknot/rrset-dump.h
 include/libknot/rrset.h
 include/libknot/rrtype/dnskey.h
 include/libknot/rrtype/ds.h
 include/libknot/rrtype/naptr.h
 include/libknot/rrtype/nsec.h
 include/libknot/rrtype/nsec3.h
 include/libknot/rrtype/nsec3param.h
 include/libknot/rrtype/opt.h
 include/libknot/rrtype/rdname.h
 include/libknot/rrtype/rrsig.h
 include/libknot/rrtype/soa.h
 include/libknot/rrtype/svcb.h
 include/libknot/rrtype/tsig.h
 include/libknot/rrtype/zonemd.h
 include/libknot/tsig-op.h
 include/libknot/tsig.h
 include/libknot/version.h
 include/libknot/wire.h
 include/libknot/xdp.h
 include/libknot/xdp/tcp_iobuf.h
 include/libknot/yparser/yparser.h
 include/libknot/yparser/ypformat.h
 include/libknot/yparser/ypschema.h
 include/libknot/yparser/yptrafo.h
 include/libzscanner/error.h
 include/libzscanner/scanner.h
 include/libzscanner/version.h
 lib/libdnssec.a
 lib/libdnssec.so
-lib/libdnssec.so.9
-lib/libdnssec.so.9.0.0
+lib/libdnssec.so.10
+lib/libdnssec.so.10.0.0
 lib/libknot.a
 lib/libknot.so
-lib/libknot.so.15
-lib/libknot.so.15.0.0
+lib/libknot.so.16
+lib/libknot.so.16.0.0
 lib/libzscanner.a
 lib/libzscanner.so
-lib/libzscanner.so.4
-lib/libzscanner.so.4.0.0
+lib/libzscanner.so.5
+lib/libzscanner.so.5.0.0
 %%DAEMON%%libdata/pkgconfig/knotd.pc
 libdata/pkgconfig/libdnssec.pc
 libdata/pkgconfig/libknot.pc
 libdata/pkgconfig/libzscanner.pc
 %%DOCS%%share/man/man1/kdig.1.gz
 %%DOCS%%share/man/man1/khost.1.gz
 %%DOCS%%share/man/man1/knsec3hash.1.gz
 %%DOCS%%share/man/man1/knsupdate.1.gz
 %%DOCS%%share/man/man1/kzonecheck.1.gz
 %%DOCS%%share/man/man1/kzonesign.1.gz
 %%DOCS%%share/man/man5/knot.conf.5.gz
 %%DOCS%%share/man/man8/kcatalogprint.8.gz
 %%DOCS%%share/man/man8/keymgr.8.gz
 %%DOCS%%share/man/man8/kjournalprint.8.gz
 %%DOCS%%share/man/man8/knotc.8.gz
 %%DOCS%%share/man/man8/knotd.8.gz
 %%DOCS%%share/man/man8/kxdpgun.8.gz
 %%DAEMON%%sbin/kcatalogprint
 %%DAEMON%%sbin/keymgr
 %%DAEMON%%sbin/kjournalprint
 %%DAEMON%%sbin/knotc
 %%DAEMON%%sbin/knotd
 %%DAEMON%%@dir(%%USERS%%,%%GROUPS%%,0750) %%DATADIR%%
 %%DAEMON%%@dir(%%USERS%%,%%GROUPS%%,0750) %%ETCDIR%%
 %%DAEMON%%@dir(%%USERS%%,%%GROUPS%%,0700) %%RUNDIR%%