diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a2481e072829..a75d52aa2961 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -12,7 +12,7 @@ on:
       - "!deploy/iso/**"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index f8a0ee182e1a..3eb05727c9e6 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -6,7 +6,7 @@ on:
       - master
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/functional_verified.yml b/.github/workflows/functional_verified.yml
index 35517db57b63..6ef8bcc3f349 100644
--- a/.github/workflows/functional_verified.yml
+++ b/.github/workflows/functional_verified.yml
@@ -22,7 +22,7 @@ on:
       - deleted
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 
 permissions:
   contents: read
diff --git a/.github/workflows/leaderboard.yml b/.github/workflows/leaderboard.yml
index 6a0fb75b4f90..58a15600fb2a 100644
--- a/.github/workflows/leaderboard.yml
+++ b/.github/workflows/leaderboard.yml
@@ -6,7 +6,7 @@ on:
       - 'v*-beta.*'
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml
index 9205ee793e8c..3c26356ef881 100644
--- a/.github/workflows/master.yml
+++ b/.github/workflows/master.yml
@@ -14,7 +14,7 @@ on:
       - "!deploy/iso/**"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/minikube-image-benchmark.yml b/.github/workflows/minikube-image-benchmark.yml
index 8c8b13b9aabb..f0845bbcf5d4 100644
--- a/.github/workflows/minikube-image-benchmark.yml
+++ b/.github/workflows/minikube-image-benchmark.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 2,14 * * *"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 8e6fc7b5311a..06a22e3c175e 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -12,7 +12,7 @@ on:
       - "!deploy/iso/**"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/sync-minikube.yml b/.github/workflows/sync-minikube.yml
index 6c2c8ada842c..0d35e7935e43 100644
--- a/.github/workflows/sync-minikube.yml
+++ b/.github/workflows/sync-minikube.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 2,14 * * *"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/time-to-k8s-public-chart.yml b/.github/workflows/time-to-k8s-public-chart.yml
index 25c65b4b7af6..59684bd692c0 100644
--- a/.github/workflows/time-to-k8s-public-chart.yml
+++ b/.github/workflows/time-to-k8s-public-chart.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 2,14 * * *"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/time-to-k8s.yml b/.github/workflows/time-to-k8s.yml
index 524ad8851621..ec92fe8c3afb 100644
--- a/.github/workflows/time-to-k8s.yml
+++ b/.github/workflows/time-to-k8s.yml
@@ -5,7 +5,7 @@ on:
     types: [released]
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/translations.yml b/.github/workflows/translations.yml
index 676f8e25cc65..5b4cb686796b 100644
--- a/.github/workflows/translations.yml
+++ b/.github/workflows/translations.yml
@@ -6,7 +6,7 @@ on:
       - "translations/**"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-amd-gpu-device-plugin-version.yml b/.github/workflows/update-amd-gpu-device-plugin-version.yml
index be5cd7c2a05d..d50838ebd0f3 100644
--- a/.github/workflows/update-amd-gpu-device-plugin-version.yml
+++ b/.github/workflows/update-amd-gpu-device-plugin-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-buildkit-version.yml b/.github/workflows/update-buildkit-version.yml
index 7878774a75d6..999140c4d2b4 100644
--- a/.github/workflows/update-buildkit-version.yml
+++ b/.github/workflows/update-buildkit-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 3"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-calico-version.yml b/.github/workflows/update-calico-version.yml
index 6e24a0f4b916..5f4b1f37408b 100644
--- a/.github/workflows/update-calico-version.yml
+++ b/.github/workflows/update-calico-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-cilium-version.yml b/.github/workflows/update-cilium-version.yml
index ed1088a0d528..98fa1c573d4f 100644
--- a/.github/workflows/update-cilium-version.yml
+++ b/.github/workflows/update-cilium-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-cloud-spanner-emulator-version.yml b/.github/workflows/update-cloud-spanner-emulator-version.yml
index de77ff1dbf88..489320230a22 100644
--- a/.github/workflows/update-cloud-spanner-emulator-version.yml
+++ b/.github/workflows/update-cloud-spanner-emulator-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-cni-plugins-version.yml b/.github/workflows/update-cni-plugins-version.yml
index 99a63670c540..cb4ce82d2274 100644
--- a/.github/workflows/update-cni-plugins-version.yml
+++ b/.github/workflows/update-cni-plugins-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-containerd-version.yml b/.github/workflows/update-containerd-version.yml
index 94634610622e..f4b72140f9ae 100644
--- a/.github/workflows/update-containerd-version.yml
+++ b/.github/workflows/update-containerd-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-cri-dockerd-version.yml b/.github/workflows/update-cri-dockerd-version.yml
index 8bc08dbb9638..71c1b6d3d633 100644
--- a/.github/workflows/update-cri-dockerd-version.yml
+++ b/.github/workflows/update-cri-dockerd-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-cri-o-version.yml b/.github/workflows/update-cri-o-version.yml
index 89a876de8585..e50f38f9bf03 100644
--- a/.github/workflows/update-cri-o-version.yml
+++ b/.github/workflows/update-cri-o-version.yml
@@ -7,7 +7,7 @@ on:
     # - cron: "0 10 * * 5"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-crictl-version.yml b/.github/workflows/update-crictl-version.yml
index d4bed510956e..ada48483302e 100644
--- a/.github/workflows/update-crictl-version.yml
+++ b/.github/workflows/update-crictl-version.yml
@@ -7,7 +7,7 @@ on:
     # - cron: "0 10 * * 3"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-crun-version.yml b/.github/workflows/update-crun-version.yml
index 77371afaa479..bbe04e9620a2 100644
--- a/.github/workflows/update-crun-version.yml
+++ b/.github/workflows/update-crun-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 3"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-docker-buildx-version.yml b/.github/workflows/update-docker-buildx-version.yml
index 864fb5843263..1f973b5787ca 100644
--- a/.github/workflows/update-docker-buildx-version.yml
+++ b/.github/workflows/update-docker-buildx-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-docker-version.yml b/.github/workflows/update-docker-version.yml
index 48fec43b6f85..a16d412fd93c 100644
--- a/.github/workflows/update-docker-version.yml
+++ b/.github/workflows/update-docker-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 4"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-docsy-version.yml b/.github/workflows/update-docsy-version.yml
index 1d363fb79849..5c0579de9755 100644
--- a/.github/workflows/update-docsy-version.yml
+++ b/.github/workflows/update-docsy-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-flannel-version.yml b/.github/workflows/update-flannel-version.yml
index 63b2598a2dea..0a9cec0ad759 100644
--- a/.github/workflows/update-flannel-version.yml
+++ b/.github/workflows/update-flannel-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-gcp-auth-version.yml b/.github/workflows/update-gcp-auth-version.yml
index e2233101a0a4..04173b309852 100644
--- a/.github/workflows/update-gcp-auth-version.yml
+++ b/.github/workflows/update-gcp-auth-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-gh-version.yml b/.github/workflows/update-gh-version.yml
index 3835cebd41d2..d675004fdc5e 100644
--- a/.github/workflows/update-gh-version.yml
+++ b/.github/workflows/update-gh-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-go-github-version.yml b/.github/workflows/update-go-github-version.yml
index 7b311943a21e..1e2c1286fb50 100644
--- a/.github/workflows/update-go-github-version.yml
+++ b/.github/workflows/update-go-github-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-golang-version.yml b/.github/workflows/update-golang-version.yml
index a53dad2149ee..f79b9edf7178 100644
--- a/.github/workflows/update-golang-version.yml
+++ b/.github/workflows/update-golang-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 9 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-golint-version.yml b/.github/workflows/update-golint-version.yml
index 6dadc8044ed0..be0cc3b2fd29 100644
--- a/.github/workflows/update-golint-version.yml
+++ b/.github/workflows/update-golint-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-gopogh-version.yml b/.github/workflows/update-gopogh-version.yml
index e9cb1dc4236d..e0ea2aff2d5c 100644
--- a/.github/workflows/update-gopogh-version.yml
+++ b/.github/workflows/update-gopogh-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 9 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-gotestsum-version.yml b/.github/workflows/update-gotestsum-version.yml
index 5da435228033..19b6557d79a1 100644
--- a/.github/workflows/update-gotestsum-version.yml
+++ b/.github/workflows/update-gotestsum-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-hugo-version.yml b/.github/workflows/update-hugo-version.yml
index 12efebe0a069..bf7818511c01 100644
--- a/.github/workflows/update-hugo-version.yml
+++ b/.github/workflows/update-hugo-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-ingress-version.yml b/.github/workflows/update-ingress-version.yml
index 8d7b5654d2aa..0e51619a3663 100644
--- a/.github/workflows/update-ingress-version.yml
+++ b/.github/workflows/update-ingress-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-inspektor-gadget-version.yml b/.github/workflows/update-inspektor-gadget-version.yml
index 1567134c52c6..d2ce5453e471 100644
--- a/.github/workflows/update-inspektor-gadget-version.yml
+++ b/.github/workflows/update-inspektor-gadget-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-iso-image-versions.yml b/.github/workflows/update-iso-image-versions.yml
index 1dd30e230a6b..4a0185ec9b85 100644
--- a/.github/workflows/update-iso-image-versions.yml
+++ b/.github/workflows/update-iso-image-versions.yml
@@ -3,7 +3,7 @@ on:
   workflow_dispatch:
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 jobs:
diff --git a/.github/workflows/update-istio-operator.yml b/.github/workflows/update-istio-operator.yml
index 56cdf2a2dfe3..b88366564b2e 100644
--- a/.github/workflows/update-istio-operator.yml
+++ b/.github/workflows/update-istio-operator.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-k8s-versions.yml b/.github/workflows/update-k8s-versions.yml
index b125b077a6b1..6ab3044d1364 100644
--- a/.github/workflows/update-k8s-versions.yml
+++ b/.github/workflows/update-k8s-versions.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 8 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-kindnetd-version.yml b/.github/workflows/update-kindnetd-version.yml
index 4e6602feaeb6..be29535b9dbc 100644
--- a/.github/workflows/update-kindnetd-version.yml
+++ b/.github/workflows/update-kindnetd-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 jobs:
diff --git a/.github/workflows/update-kong-ingress-controller-version.yml b/.github/workflows/update-kong-ingress-controller-version.yml
index 2b16841c6674..4f81626cb2cc 100644
--- a/.github/workflows/update-kong-ingress-controller-version.yml
+++ b/.github/workflows/update-kong-ingress-controller-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-kong-version.yml b/.github/workflows/update-kong-version.yml
index eff8bf6b7c13..29880d3769dd 100644
--- a/.github/workflows/update-kong-version.yml
+++ b/.github/workflows/update-kong-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-kube-registry-proxy-version.yaml b/.github/workflows/update-kube-registry-proxy-version.yaml
index 32c26799ac81..5a4de4087df1 100644
--- a/.github/workflows/update-kube-registry-proxy-version.yaml
+++ b/.github/workflows/update-kube-registry-proxy-version.yaml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-kube-vip-version.yml b/.github/workflows/update-kube-vip-version.yml
index e251dc65ac63..0c48b9fdcee1 100644
--- a/.github/workflows/update-kube-vip-version.yml
+++ b/.github/workflows/update-kube-vip-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-kubeadm-constants.yml b/.github/workflows/update-kubeadm-constants.yml
index 9186dbe93438..d8bf060036cc 100644
--- a/.github/workflows/update-kubeadm-constants.yml
+++ b/.github/workflows/update-kubeadm-constants.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 6 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-kubectl-version.yml b/.github/workflows/update-kubectl-version.yml
index ada18c821af7..28584f86c03f 100644
--- a/.github/workflows/update-kubectl-version.yml
+++ b/.github/workflows/update-kubectl-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-kubernetes-versions-list.yml b/.github/workflows/update-kubernetes-versions-list.yml
index 08ab293ab912..314431def4af 100644
--- a/.github/workflows/update-kubernetes-versions-list.yml
+++ b/.github/workflows/update-kubernetes-versions-list.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 6 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-metrics-server-version.yml b/.github/workflows/update-metrics-server-version.yml
index 390be1960188..18020de0180d 100644
--- a/.github/workflows/update-metrics-server-version.yml
+++ b/.github/workflows/update-metrics-server-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-nerdctl-version.yml b/.github/workflows/update-nerdctl-version.yml
index e749c3c309bf..0d842795da42 100644
--- a/.github/workflows/update-nerdctl-version.yml
+++ b/.github/workflows/update-nerdctl-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-nerdctld-version.yml b/.github/workflows/update-nerdctld-version.yml
index 7de8aed9763b..bf83978b2bc2 100644
--- a/.github/workflows/update-nerdctld-version.yml
+++ b/.github/workflows/update-nerdctld-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-nvidia-device-plugin-version.yml b/.github/workflows/update-nvidia-device-plugin-version.yml
index 31d1c3e46ff5..3a31e3e8bf2c 100644
--- a/.github/workflows/update-nvidia-device-plugin-version.yml
+++ b/.github/workflows/update-nvidia-device-plugin-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-registry-version.yml b/.github/workflows/update-registry-version.yml
index c069c0000175..83dd6b4c42f9 100644
--- a/.github/workflows/update-registry-version.yml
+++ b/.github/workflows/update-registry-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-runc-version.yml b/.github/workflows/update-runc-version.yml
index 5a85360659a2..0ebcfd5e257d 100644
--- a/.github/workflows/update-runc-version.yml
+++ b/.github/workflows/update-runc-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 2"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-site-node-version.yml b/.github/workflows/update-site-node-version.yml
index 8ad0a2a6a02b..4ef8b5dacc07 100644
--- a/.github/workflows/update-site-node-version.yml
+++ b/.github/workflows/update-site-node-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-ubuntu-version.yml b/.github/workflows/update-ubuntu-version.yml
index ffd41f0297f9..1c47f4d6c1d3 100644
--- a/.github/workflows/update-ubuntu-version.yml
+++ b/.github/workflows/update-ubuntu-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-volcano-version.yml b/.github/workflows/update-volcano-version.yml
index 24e657d5923f..eadbb0b1e3a5 100644
--- a/.github/workflows/update-volcano-version.yml
+++ b/.github/workflows/update-volcano-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-yakd-version.yml b/.github/workflows/update-yakd-version.yml
index 29dd8818534f..364d923af00c 100644
--- a/.github/workflows/update-yakd-version.yml
+++ b/.github/workflows/update-yakd-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/yearly-leaderboard.yml b/.github/workflows/yearly-leaderboard.yml
index dd6e528dc133..78757b85ed20 100644
--- a/.github/workflows/yearly-leaderboard.yml
+++ b/.github/workflows/yearly-leaderboard.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 0 2 * *"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/Makefile b/Makefile
index 7639615a11ea..a8e5ae474621 100644
--- a/Makefile
+++ b/Makefile
@@ -35,7 +35,7 @@ RPM_REVISION ?= 0
 
 # used by hack/jenkins/release_build_and_upload.sh and KVM_BUILD_IMAGE, see also BUILD_IMAGE below
 # update this only by running `make update-golang-version`
-GO_VERSION ?= 1.23.2
+GO_VERSION ?= 1.23.3
 # update this only by running `make update-golang-version`
 GO_K8S_VERSION_PREFIX ?= v1.32.0
 
diff --git a/deploy/addons/auto-pause/Dockerfile b/deploy/addons/auto-pause/Dockerfile
index 13578e42bcb2..7cea4a7b1b78 100644
--- a/deploy/addons/auto-pause/Dockerfile
+++ b/deploy/addons/auto-pause/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.23.2 AS builder
+FROM golang:1.23.3 AS builder
 WORKDIR /app
 COPY go.mod go.sum ./
 RUN go mod download
diff --git a/deploy/gvisor/Dockerfile b/deploy/gvisor/Dockerfile
index 2ad7857d588c..7d4696387e1a 100644
--- a/deploy/gvisor/Dockerfile
+++ b/deploy/gvisor/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.23.2 AS builder
+FROM golang:1.23.3 AS builder
 WORKDIR /app
 COPY go.mod go.sum ./
 RUN go mod download
diff --git a/deploy/iso/minikube-iso/go.hash b/deploy/iso/minikube-iso/go.hash
index 6741165935c0..22468afe0717 100644
--- a/deploy/iso/minikube-iso/go.hash
+++ b/deploy/iso/minikube-iso/go.hash
@@ -32,3 +32,4 @@ sha256  ac9c723f224969aee624bc34fd34c9e13f2a212d75c71c807de644bb46e112f6  go1.22
 sha256  42b7a8e80d805daa03022ed3fde4321d4c3bf2c990a144165d01eeecd6f699c6  go1.23.0.src.tar.gz
 sha256  6ee44e298379d146a5e5aa6b1c5b5d5f5d0a3365eabdd70741e6e21340ec3b0d  go1.23.1.src.tar.gz
 sha256  36930162a93df417d90bd22c6e14daff4705baac2b02418edda671cdfa9cd07f  go1.23.2.src.tar.gz
+sha256  8d6a77332487557c6afa2421131b50f83db4ae3c579c3bc72e670ee1f6968599  go1.23.3.src.tar.gz
diff --git a/deploy/kicbase/Dockerfile b/deploy/kicbase/Dockerfile
index eb30af4c68be..3e7a3fcb94f6 100644
--- a/deploy/kicbase/Dockerfile
+++ b/deploy/kicbase/Dockerfile
@@ -21,7 +21,7 @@
 # this ARG needs to be global to use it in `FROM` & is updated for new versions of ubuntu:jammy-*
 ARG UBUNTU_JAMMY_IMAGE="ubuntu:jammy-20240911.1"
 # multi-stage docker build so we can build auto-pause for arm64
-FROM golang:1.23.2 as auto-pause
+FROM golang:1.23.3 as auto-pause
 WORKDIR /src
 # auto-pause depends on core minikube code so we need to pass the whole source code as the context
 # copy in the minimal amount of source code possible
diff --git a/hack/jenkins/installers/check_install_golang.ps1 b/hack/jenkins/installers/check_install_golang.ps1
index c15399eafcba..d8de3ac893e1 100644
--- a/hack/jenkins/installers/check_install_golang.ps1
+++ b/hack/jenkins/installers/check_install_golang.ps1
@@ -31,7 +31,7 @@ AddToPathIfMissing -pathToAdd "C:\Program Files\Go\bin" -scope "Machine"
 AddToPathIfMissing -pathToAdd "$HOME\go\bin" -scope "User"
 
 # Download Go
-$GoVersion = "1.23.2"
+$GoVersion = "1.23.3"
 $CurrentGo = go version
 if ((!$?) -or ($CurrentGo -NotLike "*$GoVersion*")) {
     (New-Object Net.WebClient).DownloadFile("https://go.dev/dl/go$GoVersion.windows-amd64.zip", "$env:TEMP\golang.zip")
diff --git a/hack/jenkins/installers/check_install_golang.sh b/hack/jenkins/installers/check_install_golang.sh
index f1d1c6545f5c..09899b2fcc9d 100755
--- a/hack/jenkins/installers/check_install_golang.sh
+++ b/hack/jenkins/installers/check_install_golang.sh
@@ -22,7 +22,7 @@ if (($# < 1)); then
   exit 1
 fi
 
-VERSION_TO_INSTALL=1.23.2
+VERSION_TO_INSTALL=1.23.3
 INSTALL_PATH=${1}
 
 function current_arch() {