diff --git a/MODULE.bazel b/MODULE.bazel
index 8e1cab32dad4..4e1fe0d9f7cb 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -14,7 +14,7 @@ local_path_override(
 # see https://registry.bazel.build/ for a list of available packages
 
 bazel_dep(name = "platforms", version = "0.0.8")
-bazel_dep(name = "rules_pkg", version = "0.9.1")
+bazel_dep(name = "rules_pkg", version = "0.10.1")
 bazel_dep(name = "rules_nodejs", version = "6.0.3")
 bazel_dep(name = "rules_python", version = "0.31.0")
 bazel_dep(name = "bazel_skylib", version = "1.5.0")
diff --git a/cpp/BUILD.bazel b/cpp/BUILD.bazel
index fcd15f285818..d5ca1a36d343 100644
--- a/cpp/BUILD.bazel
+++ b/cpp/BUILD.bazel
@@ -1,4 +1,4 @@
-load("@rules_pkg//:mappings.bzl", "pkg_filegroup")
+load("@rules_pkg//pkg:mappings.bzl", "pkg_filegroup")
 
 package(default_visibility = ["//visibility:public"])
 
diff --git a/cpp/downgrades/BUILD.bazel b/cpp/downgrades/BUILD.bazel
index adf540e9a203..da15140b0b4f 100644
--- a/cpp/downgrades/BUILD.bazel
+++ b/cpp/downgrades/BUILD.bazel
@@ -1,4 +1,4 @@
-load("@rules_pkg//:mappings.bzl", "pkg_files", "strip_prefix")
+load("@rules_pkg//pkg:mappings.bzl", "pkg_files", "strip_prefix")
 
 pkg_files(
     name = "downgrades",
diff --git a/cpp/ql/lib/BUILD.bazel b/cpp/ql/lib/BUILD.bazel
index 4d8cbd195635..b71a607b6ec0 100644
--- a/cpp/ql/lib/BUILD.bazel
+++ b/cpp/ql/lib/BUILD.bazel
@@ -1,4 +1,4 @@
-load("@rules_pkg//:mappings.bzl", "pkg_files")
+load("@rules_pkg//pkg:mappings.bzl", "pkg_files")
 
 package(default_visibility = ["//cpp:__pkg__"])
 
diff --git a/csharp/ql/lib/BUILD.bazel b/csharp/ql/lib/BUILD.bazel
index f5fac296439e..c95314cf1902 100644
--- a/csharp/ql/lib/BUILD.bazel
+++ b/csharp/ql/lib/BUILD.bazel
@@ -1,4 +1,4 @@
-load("@rules_pkg//:mappings.bzl", "pkg_files")
+load("@rules_pkg//pkg:mappings.bzl", "pkg_files")
 
 package(default_visibility = ["//csharp:__pkg__"])
 
diff --git a/java/ql/lib/config/BUILD.bazel b/java/ql/lib/config/BUILD.bazel
index ac27ed505d68..8911fc5da389 100644
--- a/java/ql/lib/config/BUILD.bazel
+++ b/java/ql/lib/config/BUILD.bazel
@@ -1,4 +1,4 @@
-load("@rules_pkg//:mappings.bzl", "pkg_files")
+load("@rules_pkg//pkg:mappings.bzl", "pkg_files")
 
 package(default_visibility = ["//java:__pkg__"])
 
diff --git a/javascript/ql/lib/BUILD.bazel b/javascript/ql/lib/BUILD.bazel
index 940eb1b0d8bc..21ae62c86b65 100644
--- a/javascript/ql/lib/BUILD.bazel
+++ b/javascript/ql/lib/BUILD.bazel
@@ -1,4 +1,4 @@
-load("@rules_pkg//:mappings.bzl", "pkg_files")
+load("@rules_pkg//pkg:mappings.bzl", "pkg_files")
 
 package(default_visibility = ["//javascript:__pkg__"])
 
diff --git a/misc/bazel/pkg_runfiles.bzl b/misc/bazel/pkg_runfiles.bzl
index a8f215e8a55c..3d3bd8c028d5 100644
--- a/misc/bazel/pkg_runfiles.bzl
+++ b/misc/bazel/pkg_runfiles.bzl
@@ -1,4 +1,4 @@
-load("@rules_pkg//:mappings.bzl", "pkg_attributes", "pkg_files")
+load("@rules_pkg//pkg:mappings.bzl", "pkg_attributes", "pkg_files")
 
 def _runfiles_group_impl(ctx):
     files = []
diff --git a/misc/bazel/workspace_deps.bzl b/misc/bazel/workspace_deps.bzl
index 7301066951fa..b32aa0d9e71d 100644
--- a/misc/bazel/workspace_deps.bzl
+++ b/misc/bazel/workspace_deps.bzl
@@ -1,6 +1,6 @@
-load("@rules_pkg//:deps.bzl", "rules_pkg_dependencies")
-load("@rules_python//python:pip.bzl", "pip_install")
 load("@bazel_skylib//:workspace.bzl", "bazel_skylib_workspace")
+load("@rules_pkg//pkg:deps.bzl", "rules_pkg_dependencies")
+load("@rules_python//python:pip.bzl", "pip_install")
 
 def codeql_workspace_deps(repository_name = "codeql"):
     pip_install(
diff --git a/python/downgrades/BUILD.bazel b/python/downgrades/BUILD.bazel
index 924ff12ff306..2f09ec420b6d 100644
--- a/python/downgrades/BUILD.bazel
+++ b/python/downgrades/BUILD.bazel
@@ -1,4 +1,4 @@
-load("@rules_pkg//:mappings.bzl", "pkg_files", "strip_prefix")
+load("@rules_pkg//pkg:mappings.bzl", "pkg_files", "strip_prefix")
 
 pkg_files(
     name = "downgrades",
diff --git a/python/ql/lib/BUILD.bazel b/python/ql/lib/BUILD.bazel
index 6211f81d120f..92ec12c5c275 100644
--- a/python/ql/lib/BUILD.bazel
+++ b/python/ql/lib/BUILD.bazel
@@ -1,4 +1,4 @@
-load("@rules_pkg//:mappings.bzl", "pkg_files")
+load("@rules_pkg//pkg:mappings.bzl", "pkg_files")
 
 package(default_visibility = ["//python:__pkg__"])
 
diff --git a/ruby/downgrades/BUILD.bazel b/ruby/downgrades/BUILD.bazel
index 39bea56f7675..d2da9e416cdf 100644
--- a/ruby/downgrades/BUILD.bazel
+++ b/ruby/downgrades/BUILD.bazel
@@ -1,4 +1,4 @@
-load("@rules_pkg//:mappings.bzl", "pkg_files", "strip_prefix")
+load("@rules_pkg//pkg:mappings.bzl", "pkg_files", "strip_prefix")
 
 pkg_files(
     name = "downgrades",
diff --git a/ruby/ql/lib/BUILD.bazel b/ruby/ql/lib/BUILD.bazel
index 54a65933149c..8c777056061c 100644
--- a/ruby/ql/lib/BUILD.bazel
+++ b/ruby/ql/lib/BUILD.bazel
@@ -1,4 +1,4 @@
-load("@rules_pkg//:mappings.bzl", "pkg_files")
+load("@rules_pkg//pkg:mappings.bzl", "pkg_files")
 
 package(default_visibility = ["//ruby:__pkg__"])
 
diff --git a/swift/BUILD.bazel b/swift/BUILD.bazel
index 2c7c12567828..1ced5c9f1ca0 100644
--- a/swift/BUILD.bazel
+++ b/swift/BUILD.bazel
@@ -1,5 +1,5 @@
-load("@rules_pkg//:mappings.bzl", "pkg_filegroup", "pkg_files", "strip_prefix")
-load("@rules_pkg//:install.bzl", "pkg_install")
+load("@rules_pkg//pkg:install.bzl", "pkg_install")
+load("@rules_pkg//pkg:mappings.bzl", "pkg_filegroup", "pkg_files")
 load("//:defs.bzl", "codeql_platform")
 load("//misc/bazel:pkg_runfiles.bzl", "pkg_runfiles")
 load("//misc/bazel/cmake:cmake.bzl", "generate_cmake")
diff --git a/swift/downgrades/BUILD.bazel b/swift/downgrades/BUILD.bazel
index d76e543a6e7c..5f643aea185d 100644
--- a/swift/downgrades/BUILD.bazel
+++ b/swift/downgrades/BUILD.bazel
@@ -1,4 +1,4 @@
-load("@rules_pkg//:mappings.bzl", "pkg_files", "strip_prefix")
+load("@rules_pkg//pkg:mappings.bzl", "pkg_files", "strip_prefix")
 
 pkg_files(
     name = "downgrades",
diff --git a/swift/third_party/BUILD.swift-toolchain-linux.bazel b/swift/third_party/BUILD.swift-toolchain-linux.bazel
index 8125d4a04481..be2c2e12a971 100644
--- a/swift/third_party/BUILD.swift-toolchain-linux.bazel
+++ b/swift/third_party/BUILD.swift-toolchain-linux.bazel
@@ -1,4 +1,4 @@
-load("@rules_pkg//:mappings.bzl", "pkg_filegroup", "pkg_files")
+load("@rules_pkg//pkg:mappings.bzl", "pkg_filegroup", "pkg_files")
 
 _strip_prefix = "usr/lib/swift"
 
diff --git a/swift/third_party/BUILD.swift-toolchain-macos.bazel b/swift/third_party/BUILD.swift-toolchain-macos.bazel
index ddeba6b0665b..38250f1d2104 100644
--- a/swift/third_party/BUILD.swift-toolchain-macos.bazel
+++ b/swift/third_party/BUILD.swift-toolchain-macos.bazel
@@ -1,4 +1,4 @@
-load("@rules_pkg//:mappings.bzl", "pkg_files")
+load("@rules_pkg//pkg:mappings.bzl", "pkg_files")
 
 _strip_prefix = "usr/lib/swift"
 
diff --git a/swift/tools/BUILD.bazel b/swift/tools/BUILD.bazel
index ee834e543cc5..e59561bf528d 100644
--- a/swift/tools/BUILD.bazel
+++ b/swift/tools/BUILD.bazel
@@ -1,4 +1,4 @@
-load("@rules_pkg//:mappings.bzl", "pkg_attributes", "pkg_filegroup", "pkg_files")
+load("@rules_pkg//pkg:mappings.bzl", "pkg_attributes", "pkg_filegroup", "pkg_files")
 
 sh_binary(
     name = "qltest",