diff --git a/thunderbird/.SRCINFO b/thunderbird/.SRCINFO
index 4e04cb88d0..9b8c5be38e 100644
--- a/thunderbird/.SRCINFO
+++ b/thunderbird/.SRCINFO
@@ -1,6 +1,6 @@
 pkgbase = thunderbird
 	pkgdesc = Standalone mail and news reader from mozilla.org
-	pkgver = 128.3.1
+	pkgver = 128.5.2
 	pkgrel = 1
 	url = https://www.thunderbird.net/
 	arch = x86_64
@@ -12,7 +12,7 @@ pkgbase = thunderbird
 	makedepends = unzip
 	makedepends = zip
 	makedepends = diffutils
-	makedepends = python
+	makedepends = python311
 	makedepends = mesa
 	makedepends = libpulse
 	makedepends = libice
@@ -86,8 +86,8 @@ pkgbase = thunderbird
 	options = !emptydirs
 	options = !makeflags
 	options = !lto
-	source = https://archive.mozilla.org/pub/thunderbird/releases/128.3.1esr/source/thunderbird-128.3.1esr.source.tar.xz
-	source = https://archive.mozilla.org/pub/thunderbird/releases/128.3.1esr/source/thunderbird-128.3.1esr.source.tar.xz.asc
+	source = https://archive.mozilla.org/pub/thunderbird/releases/128.5.2esr/source/thunderbird-128.5.2esr.source.tar.xz
+	source = https://archive.mozilla.org/pub/thunderbird/releases/128.5.2esr/source/thunderbird-128.5.2esr.source.tar.xz.asc
 	source = vendor-prefs.js
 	source = distribution.ini
 	source = mozconfig.cfg
@@ -96,7 +96,7 @@ pkgbase = thunderbird
 	source = thunderbird-system-icu-74.patch
 	validpgpkeys = 14F26682D0916CDD81E37B6D61B7B526D98F0353
 	validpgpkeys = 4360FE2109C49763186F8E21EBE41E90F6F12F6D
-	sha256sums = 0e4a00d92b30b7d82213f710a1f5277796d965717888ae01e0cddf6b7bd889c9
+	sha256sums = ef932fe30fcc3f90f465feffcf641147d678ec3ecda220f317046e715a905547
 	sha256sums = SKIP
 	sha256sums = fa11b4736bbf53ec015f71cd42b1040b22d1a855c562b76927b3f0eccb925c85
 	sha256sums = 4a3a61e119637000c563a194283ef741959756b75edf7be84e25b4253c4288c5
diff --git a/thunderbird/PKGBUILD b/thunderbird/PKGBUILD
index b865cc0fbb..2cdfa7b644 100644
--- a/thunderbird/PKGBUILD
+++ b/thunderbird/PKGBUILD
@@ -8,7 +8,7 @@
 
 pkgbase=thunderbird
 pkgname=(thunderbird)
-pkgver=128.3.1
+pkgver=128.5.2
 pkgrel=1
 pkgdesc='Standalone mail and news reader from mozilla.org'
 url='https://www.thunderbird.net/'
@@ -55,7 +55,7 @@ depends=(
   icu libicui18n.so libicuuc.so
 )
 makedepends=(
-  unzip zip diffutils python mesa libpulse libice libsm
+  unzip zip diffutils python311 mesa libpulse libice libsm
   rust clang llvm cbindgen lld
   gawk perl findutils libotr wasi-compiler-rt wasi-libc wasi-libc++ wasi-libc++abi
 )
@@ -72,7 +72,7 @@ source=(https://archive.mozilla.org/pub/thunderbird/releases/${pkgver}esr/source
         org.mozilla.Thunderbird.desktop
         thunderbird-system-icu-74.patch # https://bugzilla.mozilla.org/show_bug.cgi?id=1862601
 )
-sha256sums=('0e4a00d92b30b7d82213f710a1f5277796d965717888ae01e0cddf6b7bd889c9'
+sha256sums=('ef932fe30fcc3f90f465feffcf641147d678ec3ecda220f317046e715a905547'
             'SKIP'
             'fa11b4736bbf53ec015f71cd42b1040b22d1a855c562b76927b3f0eccb925c85'
             '4a3a61e119637000c563a194283ef741959756b75edf7be84e25b4253c4288c5'
@@ -156,9 +156,9 @@ build() {
   CXXFLAGS="${CXXFLAGS/_FORTIFY_SOURCE=3/_FORTIFY_SOURCE=2}"
   CXXFLAGS="${CXXFLAGS/-fexceptions/}"
 
-  ./mach configure
-  ./mach build
-  ./mach buildsymbols
+  python3.11 mach configure
+  python3.11 mach build
+  python3.11 mach buildsymbols
 }
 
 package_thunderbird() {
@@ -169,7 +169,7 @@ package_thunderbird() {
   )
 
   cd $pkgname-$pkgver
-  DESTDIR="$pkgdir" ./mach install
+  DESTDIR="$pkgdir" python3.11 mach install
 
   install -Dm 644 ../vendor-prefs.js -t "$pkgdir/usr/lib/$pkgname/defaults/pref"
   install -Dm 644 ../distribution.ini -t "$pkgdir/usr/lib/$pkgname/distribution"