diff --git a/.github/workflows/go.yaml b/.github/workflows/go.yaml
index 6f10a4770d..10380379f2 100644
--- a/.github/workflows/go.yaml
+++ b/.github/workflows/go.yaml
@@ -23,7 +23,7 @@ jobs:
       uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: 1.23.2
+        go-version: 1.23.3
 
     - name: Run static checks
       uses: golangci/golangci-lint-action@971e284b6050e8a5849b72094c50ab08da042db8 # v6.1.1
diff --git a/.github/workflows/kind.yaml b/.github/workflows/kind.yaml
index c4217e9a64..ed7f492f90 100644
--- a/.github/workflows/kind.yaml
+++ b/.github/workflows/kind.yaml
@@ -41,7 +41,7 @@ jobs:
         uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: 1.23.2
+          go-version: 1.23.3
 
       - name: Set up Go for root
         run: |
@@ -232,7 +232,7 @@ jobs:
         uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: 1.23.2
+          go-version: 1.23.3
 
       - name: Set up Go for root
         run: |
diff --git a/.github/workflows/multicluster.yaml b/.github/workflows/multicluster.yaml
index bff8871a03..fb10eb4d7b 100644
--- a/.github/workflows/multicluster.yaml
+++ b/.github/workflows/multicluster.yaml
@@ -95,7 +95,7 @@ jobs:
         uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: 1.23.2
+          go-version: 1.23.3
 
       - name: Set up job variables
         id: vars
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index e7ca5683e6..4b7077299a 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -20,7 +20,7 @@ jobs:
         uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: 1.23.2
+          go-version: 1.23.3
 
       - name: Generate the artifacts
         run: make release
diff --git a/Dockerfile b/Dockerfile
index 90ac9f701e..58964e40ce 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -8,7 +8,7 @@
 # cilium-cli is from scratch only including cilium binaries
 ARG FINAL_CONTAINER="cilium-cli-ci"
 
-FROM docker.io/library/golang:1.23.2-alpine3.19@sha256:f6392ffebb028fed5ffe743ddb9716e38402c978779edd66474bb5d05f5e65e4 AS builder
+FROM docker.io/library/golang:1.23.3-alpine3.19@sha256:36cc30986d1f9bc46670526fe6553b078097e562e196344dea6a075e434f8341 AS builder
 WORKDIR /go/src/github.com/cilium/cilium-cli
 RUN apk add --no-cache curl git make ca-certificates
 COPY . .