diff --git a/WORKSPACE b/WORKSPACE
index 75f3901..5af740d 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -126,11 +126,11 @@
 )
 
 container_pull(
-    name = "gerrit-3.0.0",
+    name = "gerrit-3.0.8",
     registry = "index.docker.io",
     repository = "gerritcodereview/gerrit",
-    tag = "3.0.0-ubuntu18",
-    digest = "sha256:f107729011d8b81611e35a0ad452f21a424c1820664e9f95d135ad411e87b9bb",
+    tag = "3.0.8-ubuntu18",
+    digest = "sha256:8f58236129e6547d92502a2e9d8f40129f45f15007beaeafb59fed4faffddb3e",
 )
 
 # HTTP stuff from the Internet
@@ -217,13 +217,12 @@
 
 gazelle_dependencies()
 
-# For devtools/gerrit/gerrit-oauth-provider
+# For devtools/gerrit/gerrit-oauth-provider and gerrit OWNERS plugin
 
 git_repository(
     name = "com_googlesource_gerrit_bazlets",
     remote = "https://gerrit.googlesource.com/bazlets",
-    commit = "8528a0df69dadf6311d8d3f81c1b693afda8bcf1",
-    shallow_since = "1560842141 +0200",
+    commit = "1d381f01c853e2c02ae35430a8e294e485635d62",
 )
 
 load(
@@ -233,7 +232,9 @@
 
 gerrit_api()
 
-load("@com_googlesource_gerrit_bazlets//tools:maven_jar.bzl", "maven_jar")
+load("@com_googlesource_gerrit_bazlets//tools:maven_jar.bzl", "maven_jar", "GERRIT")
+PROLOG_VERS = "1.4.3"
+JACKSON_VER = "2.9.7"
 
 maven_jar(
     name = "scribe",
@@ -247,6 +248,62 @@
     sha1 = "4216af16d38465bbab0f3dff8efa14204f7a399a",
 )
 
+maven_jar(
+    name = "jackson-core",
+    artifact = "com.fasterxml.jackson.core:jackson-core:" + JACKSON_VER,
+    sha1 = "4b7f0e0dc527fab032e9800ed231080fdc3ac015",
+)
+maven_jar(
+    name = "jackson-databind",
+    artifact = "com.fasterxml.jackson.core:jackson-databind:" + JACKSON_VER,
+    sha1 = "e6faad47abd3179666e89068485a1b88a195ceb7",
+)
+maven_jar(
+    name = "jackson-annotations",
+    artifact = "com.fasterxml.jackson.core:jackson-annotations:" + JACKSON_VER,
+    sha1 = "4b838e5c4fc17ac02f3293e9a558bb781a51c46d",
+)
+maven_jar(
+    name = "jackson-dataformat-yaml",
+    artifact = "com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:" + JACKSON_VER,
+    sha1 = "a428edc4bb34a2da98a50eb759c26941d4e85960",
+)
+maven_jar(
+    name = "snakeyaml",
+    artifact = "org.yaml:snakeyaml:1.23",
+    sha1 = "ec62d74fe50689c28c0ff5b35d3aebcaa8b5be68",
+)
+
+maven_jar(
+    name = "prolog-runtime",
+    artifact = "com.googlecode.prolog-cafe:prolog-runtime:" + PROLOG_VERS,
+    attach_source = False,
+    repository = GERRIT,
+    sha1 = "d5206556cbc76ffeab21313ffc47b586a1efbcbb",
+)
+maven_jar(
+    name = "prolog-compiler",
+    artifact = "com.googlecode.prolog-cafe:prolog-compiler:" + PROLOG_VERS,
+    attach_source = False,
+    repository = GERRIT,
+    sha1 = "f37032cf1dec3e064427745bc59da5a12757a3b2",
+)
+maven_jar(
+    name = "prolog-io",
+    artifact = "com.googlecode.prolog-cafe:prolog-io:" + PROLOG_VERS,
+    attach_source = False,
+    repository = GERRIT,
+    sha1 = "d02b2640b26f64036b6ba2b45e4acc79281cea17",
+)
+
+# Gerrit OWNERS plugins external repositories
+
+git_repository(
+    name = "com_googlesource_gerrit_plugin_owners",
+    remote = "https://gerrit.googlesource.com/plugins/owners/",
+    commit = "5e691e87b8c00a04d261a8dd313f4d16c54797e8",
+)
+
 # For devtools/bazel-cache
 
 git_repository(