diff --git a/dockerfiles/cd/builders/ng-monitoring/Dockerfile b/dockerfiles/cd/builders/ng-monitoring/Dockerfile
index c731a877..5d853863 100644
--- a/dockerfiles/cd/builders/ng-monitoring/Dockerfile
+++ b/dockerfiles/cd/builders/ng-monitoring/Dockerfile
@@ -23,7 +23,7 @@ RUN yum update --nogpgcheck -y && \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.21.10
+ARG GOLANG_VERSION=1.21.12
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH /usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/skaffold.yaml b/dockerfiles/cd/builders/skaffold.yaml
index d7665161..90c34129 100644
--- a/dockerfiles/cd/builders/skaffold.yaml
+++ b/dockerfiles/cd/builders/skaffold.yaml
@@ -88,7 +88,7 @@ profiles:
         path: /build/artifacts/0/kaniko/buildArgs
         value: &value-go1-21
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.21.10
+          GOLANG_VERSION: 1.21.12
       - op: add
         path: /build/artifacts/1/kaniko/buildArgs
         value: *value-go1-21
diff --git a/dockerfiles/cd/builders/tidb-dashboard/Dockerfile b/dockerfiles/cd/builders/tidb-dashboard/Dockerfile
index 7d2ee2f4..c422bc52 100644
--- a/dockerfiles/cd/builders/tidb-dashboard/Dockerfile
+++ b/dockerfiles/cd/builders/tidb-dashboard/Dockerfile
@@ -21,7 +21,7 @@ RUN yum -y update && \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.21.10
+ARG GOLANG_VERSION=1.21.12
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH /usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/tidb/Dockerfile b/dockerfiles/cd/builders/tidb/Dockerfile
index 4ec203f9..694a1bdd 100644
--- a/dockerfiles/cd/builders/tidb/Dockerfile
+++ b/dockerfiles/cd/builders/tidb/Dockerfile
@@ -22,7 +22,7 @@ RUN yum update --nogpgcheck -y && \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.21.10
+ARG GOLANG_VERSION=1.21.12
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH /usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/tiflow/Dockerfile b/dockerfiles/cd/builders/tiflow/Dockerfile
index e57c6c93..2f56bd09 100644
--- a/dockerfiles/cd/builders/tiflow/Dockerfile
+++ b/dockerfiles/cd/builders/tiflow/Dockerfile
@@ -21,7 +21,7 @@ RUN yum update --nogpgcheck -y && \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.21.10
+ARG GOLANG_VERSION=1.21.12
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH /usr/local/go/bin/:$PATH
diff --git a/dockerfiles/ci/release-build-base/Dockerfile b/dockerfiles/ci/release-build-base/Dockerfile
index 775d7178..57bd29c7 100644
--- a/dockerfiles/ci/release-build-base/Dockerfile
+++ b/dockerfiles/ci/release-build-base/Dockerfile
@@ -55,7 +55,7 @@ RUN yum update --nogpgcheck -y && \
 
 ##### install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.21.10
+ARG GOLANG_VERSION=1.21.12
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH /usr/local/go/bin/:$PATH
diff --git a/dockerfiles/ci/skaffold.yaml b/dockerfiles/ci/skaffold.yaml
index f011c1be..ff00b2c6 100644
--- a/dockerfiles/ci/skaffold.yaml
+++ b/dockerfiles/ci/skaffold.yaml
@@ -52,7 +52,7 @@ profiles:
         path: /build/artifacts/0/kaniko/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.21.10
+          GOLANG_VERSION: 1.21.12
   - name: go-1.20
     patches:
       - op: replace
@@ -126,7 +126,7 @@ profiles:
         path: /build/artifacts/0/kaniko/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.21.10
+          GOLANG_VERSION: 1.21.12
   - name: go-1.20
     patches:
       - op: replace