diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a2481e072829..a75d52aa2961 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -12,7 +12,7 @@ on:
       - "!deploy/iso/**"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index f8a0ee182e1a..3eb05727c9e6 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -6,7 +6,7 @@ on:
       - master
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/functional_verified.yml b/.github/workflows/functional_verified.yml
index 35517db57b63..6ef8bcc3f349 100644
--- a/.github/workflows/functional_verified.yml
+++ b/.github/workflows/functional_verified.yml
@@ -22,7 +22,7 @@ on:
       - deleted
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 
 permissions:
   contents: read
diff --git a/.github/workflows/leaderboard.yml b/.github/workflows/leaderboard.yml
index 6a0fb75b4f90..58a15600fb2a 100644
--- a/.github/workflows/leaderboard.yml
+++ b/.github/workflows/leaderboard.yml
@@ -6,7 +6,7 @@ on:
       - 'v*-beta.*'
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml
index 9205ee793e8c..3c26356ef881 100644
--- a/.github/workflows/master.yml
+++ b/.github/workflows/master.yml
@@ -14,7 +14,7 @@ on:
       - "!deploy/iso/**"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/minikube-image-benchmark.yml b/.github/workflows/minikube-image-benchmark.yml
index 8c8b13b9aabb..f0845bbcf5d4 100644
--- a/.github/workflows/minikube-image-benchmark.yml
+++ b/.github/workflows/minikube-image-benchmark.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 2,14 * * *"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 8e6fc7b5311a..06a22e3c175e 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -12,7 +12,7 @@ on:
       - "!deploy/iso/**"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/sync-minikube.yml b/.github/workflows/sync-minikube.yml
index 6c2c8ada842c..0d35e7935e43 100644
--- a/.github/workflows/sync-minikube.yml
+++ b/.github/workflows/sync-minikube.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 2,14 * * *"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/time-to-k8s-public-chart.yml b/.github/workflows/time-to-k8s-public-chart.yml
index 25c65b4b7af6..59684bd692c0 100644
--- a/.github/workflows/time-to-k8s-public-chart.yml
+++ b/.github/workflows/time-to-k8s-public-chart.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 2,14 * * *"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/time-to-k8s.yml b/.github/workflows/time-to-k8s.yml
index 524ad8851621..ec92fe8c3afb 100644
--- a/.github/workflows/time-to-k8s.yml
+++ b/.github/workflows/time-to-k8s.yml
@@ -5,7 +5,7 @@ on:
     types: [released]
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/translations.yml b/.github/workflows/translations.yml
index 676f8e25cc65..5b4cb686796b 100644
--- a/.github/workflows/translations.yml
+++ b/.github/workflows/translations.yml
@@ -6,7 +6,7 @@ on:
       - "translations/**"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-amd-gpu-device-plugin-version.yml b/.github/workflows/update-amd-gpu-device-plugin-version.yml
index be5cd7c2a05d..d50838ebd0f3 100644
--- a/.github/workflows/update-amd-gpu-device-plugin-version.yml
+++ b/.github/workflows/update-amd-gpu-device-plugin-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-buildkit-version.yml b/.github/workflows/update-buildkit-version.yml
index 7878774a75d6..999140c4d2b4 100644
--- a/.github/workflows/update-buildkit-version.yml
+++ b/.github/workflows/update-buildkit-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 3"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-calico-version.yml b/.github/workflows/update-calico-version.yml
index 6e24a0f4b916..5f4b1f37408b 100644
--- a/.github/workflows/update-calico-version.yml
+++ b/.github/workflows/update-calico-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-cilium-version.yml b/.github/workflows/update-cilium-version.yml
index ed1088a0d528..98fa1c573d4f 100644
--- a/.github/workflows/update-cilium-version.yml
+++ b/.github/workflows/update-cilium-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-cloud-spanner-emulator-version.yml b/.github/workflows/update-cloud-spanner-emulator-version.yml
index de77ff1dbf88..489320230a22 100644
--- a/.github/workflows/update-cloud-spanner-emulator-version.yml
+++ b/.github/workflows/update-cloud-spanner-emulator-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-cni-plugins-version.yml b/.github/workflows/update-cni-plugins-version.yml
index 99a63670c540..cb4ce82d2274 100644
--- a/.github/workflows/update-cni-plugins-version.yml
+++ b/.github/workflows/update-cni-plugins-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-containerd-version.yml b/.github/workflows/update-containerd-version.yml
index 94634610622e..f4b72140f9ae 100644
--- a/.github/workflows/update-containerd-version.yml
+++ b/.github/workflows/update-containerd-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-cri-dockerd-version.yml b/.github/workflows/update-cri-dockerd-version.yml
index 8bc08dbb9638..71c1b6d3d633 100644
--- a/.github/workflows/update-cri-dockerd-version.yml
+++ b/.github/workflows/update-cri-dockerd-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-cri-o-version.yml b/.github/workflows/update-cri-o-version.yml
index 89a876de8585..e50f38f9bf03 100644
--- a/.github/workflows/update-cri-o-version.yml
+++ b/.github/workflows/update-cri-o-version.yml
@@ -7,7 +7,7 @@ on:
     # - cron: "0 10 * * 5"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-crictl-version.yml b/.github/workflows/update-crictl-version.yml
index d4bed510956e..ada48483302e 100644
--- a/.github/workflows/update-crictl-version.yml
+++ b/.github/workflows/update-crictl-version.yml
@@ -7,7 +7,7 @@ on:
     # - cron: "0 10 * * 3"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-crun-version.yml b/.github/workflows/update-crun-version.yml
index 77371afaa479..bbe04e9620a2 100644
--- a/.github/workflows/update-crun-version.yml
+++ b/.github/workflows/update-crun-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 3"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-docker-buildx-version.yml b/.github/workflows/update-docker-buildx-version.yml
index 864fb5843263..1f973b5787ca 100644
--- a/.github/workflows/update-docker-buildx-version.yml
+++ b/.github/workflows/update-docker-buildx-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-docker-version.yml b/.github/workflows/update-docker-version.yml
index 48fec43b6f85..a16d412fd93c 100644
--- a/.github/workflows/update-docker-version.yml
+++ b/.github/workflows/update-docker-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 4"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-docsy-version.yml b/.github/workflows/update-docsy-version.yml
index 1d363fb79849..5c0579de9755 100644
--- a/.github/workflows/update-docsy-version.yml
+++ b/.github/workflows/update-docsy-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-flannel-version.yml b/.github/workflows/update-flannel-version.yml
index 63b2598a2dea..0a9cec0ad759 100644
--- a/.github/workflows/update-flannel-version.yml
+++ b/.github/workflows/update-flannel-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-gcp-auth-version.yml b/.github/workflows/update-gcp-auth-version.yml
index e2233101a0a4..04173b309852 100644
--- a/.github/workflows/update-gcp-auth-version.yml
+++ b/.github/workflows/update-gcp-auth-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-gh-version.yml b/.github/workflows/update-gh-version.yml
index 3835cebd41d2..d675004fdc5e 100644
--- a/.github/workflows/update-gh-version.yml
+++ b/.github/workflows/update-gh-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-go-github-version.yml b/.github/workflows/update-go-github-version.yml
index 7b311943a21e..1e2c1286fb50 100644
--- a/.github/workflows/update-go-github-version.yml
+++ b/.github/workflows/update-go-github-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-golang-version.yml b/.github/workflows/update-golang-version.yml
index a53dad2149ee..f79b9edf7178 100644
--- a/.github/workflows/update-golang-version.yml
+++ b/.github/workflows/update-golang-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 9 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-golint-version.yml b/.github/workflows/update-golint-version.yml
index 6dadc8044ed0..be0cc3b2fd29 100644
--- a/.github/workflows/update-golint-version.yml
+++ b/.github/workflows/update-golint-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-gopogh-version.yml b/.github/workflows/update-gopogh-version.yml
index e9cb1dc4236d..e0ea2aff2d5c 100644
--- a/.github/workflows/update-gopogh-version.yml
+++ b/.github/workflows/update-gopogh-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 9 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-gotestsum-version.yml b/.github/workflows/update-gotestsum-version.yml
index 5da435228033..19b6557d79a1 100644
--- a/.github/workflows/update-gotestsum-version.yml
+++ b/.github/workflows/update-gotestsum-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-hugo-version.yml b/.github/workflows/update-hugo-version.yml
index 12efebe0a069..bf7818511c01 100644
--- a/.github/workflows/update-hugo-version.yml
+++ b/.github/workflows/update-hugo-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-ingress-version.yml b/.github/workflows/update-ingress-version.yml
index 8d7b5654d2aa..0e51619a3663 100644
--- a/.github/workflows/update-ingress-version.yml
+++ b/.github/workflows/update-ingress-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-inspektor-gadget-version.yml b/.github/workflows/update-inspektor-gadget-version.yml
index 1567134c52c6..d2ce5453e471 100644
--- a/.github/workflows/update-inspektor-gadget-version.yml
+++ b/.github/workflows/update-inspektor-gadget-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-iso-image-versions.yml b/.github/workflows/update-iso-image-versions.yml
index 1dd30e230a6b..4a0185ec9b85 100644
--- a/.github/workflows/update-iso-image-versions.yml
+++ b/.github/workflows/update-iso-image-versions.yml
@@ -3,7 +3,7 @@ on:
   workflow_dispatch:
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 jobs:
diff --git a/.github/workflows/update-istio-operator.yml b/.github/workflows/update-istio-operator.yml
index 56cdf2a2dfe3..b88366564b2e 100644
--- a/.github/workflows/update-istio-operator.yml
+++ b/.github/workflows/update-istio-operator.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-k8s-versions.yml b/.github/workflows/update-k8s-versions.yml
index b125b077a6b1..6ab3044d1364 100644
--- a/.github/workflows/update-k8s-versions.yml
+++ b/.github/workflows/update-k8s-versions.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 8 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-kindnetd-version.yml b/.github/workflows/update-kindnetd-version.yml
index 4e6602feaeb6..be29535b9dbc 100644
--- a/.github/workflows/update-kindnetd-version.yml
+++ b/.github/workflows/update-kindnetd-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 jobs:
diff --git a/.github/workflows/update-kong-ingress-controller-version.yml b/.github/workflows/update-kong-ingress-controller-version.yml
index 2b16841c6674..4f81626cb2cc 100644
--- a/.github/workflows/update-kong-ingress-controller-version.yml
+++ b/.github/workflows/update-kong-ingress-controller-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-kong-version.yml b/.github/workflows/update-kong-version.yml
index eff8bf6b7c13..29880d3769dd 100644
--- a/.github/workflows/update-kong-version.yml
+++ b/.github/workflows/update-kong-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-kube-registry-proxy-version.yaml b/.github/workflows/update-kube-registry-proxy-version.yaml
index 32c26799ac81..5a4de4087df1 100644
--- a/.github/workflows/update-kube-registry-proxy-version.yaml
+++ b/.github/workflows/update-kube-registry-proxy-version.yaml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-kube-vip-version.yml b/.github/workflows/update-kube-vip-version.yml
index e251dc65ac63..0c48b9fdcee1 100644
--- a/.github/workflows/update-kube-vip-version.yml
+++ b/.github/workflows/update-kube-vip-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-kubeadm-constants.yml b/.github/workflows/update-kubeadm-constants.yml
index 9186dbe93438..d8bf060036cc 100644
--- a/.github/workflows/update-kubeadm-constants.yml
+++ b/.github/workflows/update-kubeadm-constants.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 6 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-kubectl-version.yml b/.github/workflows/update-kubectl-version.yml
index ada18c821af7..28584f86c03f 100644
--- a/.github/workflows/update-kubectl-version.yml
+++ b/.github/workflows/update-kubectl-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-kubernetes-versions-list.yml b/.github/workflows/update-kubernetes-versions-list.yml
index 08ab293ab912..314431def4af 100644
--- a/.github/workflows/update-kubernetes-versions-list.yml
+++ b/.github/workflows/update-kubernetes-versions-list.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 6 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-metrics-server-version.yml b/.github/workflows/update-metrics-server-version.yml
index 390be1960188..18020de0180d 100644
--- a/.github/workflows/update-metrics-server-version.yml
+++ b/.github/workflows/update-metrics-server-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-nerdctl-version.yml b/.github/workflows/update-nerdctl-version.yml
index e749c3c309bf..0d842795da42 100644
--- a/.github/workflows/update-nerdctl-version.yml
+++ b/.github/workflows/update-nerdctl-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-nerdctld-version.yml b/.github/workflows/update-nerdctld-version.yml
index 7de8aed9763b..bf83978b2bc2 100644
--- a/.github/workflows/update-nerdctld-version.yml
+++ b/.github/workflows/update-nerdctld-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-nvidia-device-plugin-version.yml b/.github/workflows/update-nvidia-device-plugin-version.yml
index 31d1c3e46ff5..3a31e3e8bf2c 100644
--- a/.github/workflows/update-nvidia-device-plugin-version.yml
+++ b/.github/workflows/update-nvidia-device-plugin-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-registry-version.yml b/.github/workflows/update-registry-version.yml
index c069c0000175..83dd6b4c42f9 100644
--- a/.github/workflows/update-registry-version.yml
+++ b/.github/workflows/update-registry-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-runc-version.yml b/.github/workflows/update-runc-version.yml
index 5a85360659a2..0ebcfd5e257d 100644
--- a/.github/workflows/update-runc-version.yml
+++ b/.github/workflows/update-runc-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 2"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-site-node-version.yml b/.github/workflows/update-site-node-version.yml
index 8ad0a2a6a02b..4ef8b5dacc07 100644
--- a/.github/workflows/update-site-node-version.yml
+++ b/.github/workflows/update-site-node-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-ubuntu-version.yml b/.github/workflows/update-ubuntu-version.yml
index ffd41f0297f9..1c47f4d6c1d3 100644
--- a/.github/workflows/update-ubuntu-version.yml
+++ b/.github/workflows/update-ubuntu-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-volcano-version.yml b/.github/workflows/update-volcano-version.yml
index 24e657d5923f..eadbb0b1e3a5 100644
--- a/.github/workflows/update-volcano-version.yml
+++ b/.github/workflows/update-volcano-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-yakd-version.yml b/.github/workflows/update-yakd-version.yml
index 29dd8818534f..364d923af00c 100644
--- a/.github/workflows/update-yakd-version.yml
+++ b/.github/workflows/update-yakd-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/yearly-leaderboard.yml b/.github/workflows/yearly-leaderboard.yml
index dd6e528dc133..78757b85ed20 100644
--- a/.github/workflows/yearly-leaderboard.yml
+++ b/.github/workflows/yearly-leaderboard.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 0 2 * *"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.23.2'
+  GO_VERSION: '1.23.3'
 permissions:
   contents: read
 
diff --git a/Makefile b/Makefile
index df71d96995aa..923eff7a5c86 100644
--- a/Makefile
+++ b/Makefile
@@ -24,7 +24,7 @@ KIC_VERSION ?= $(shell grep -E "Version =" pkg/drivers/kic/types.go | cut -d \"
 HUGO_VERSION ?= $(shell grep -E "HUGO_VERSION = \"" netlify.toml | cut -d \" -f2)
 
 # Default to .0 for higher cache hit rates, as build increments typically don't require new ISO versions
-ISO_VERSION ?= v1.34.0-1730913550-19917
+ISO_VERSION ?= v1.34.0-1733346028-20044
 
 # Dashes are valid in semver, but not Linux packaging. Use ~ to delimit alpha/beta
 DEB_VERSION ?= $(subst -,~,$(RAW_VERSION))
@@ -35,7 +35,7 @@ RPM_REVISION ?= 0
 
 # used by hack/jenkins/release_build_and_upload.sh and KVM_BUILD_IMAGE, see also BUILD_IMAGE below
 # update this only by running `make update-golang-version`
-GO_VERSION ?= 1.23.2
+GO_VERSION ?= 1.23.3
 # update this only by running `make update-golang-version`
 GO_K8S_VERSION_PREFIX ?= v1.32.0
 
diff --git a/deploy/addons/auto-pause/Dockerfile b/deploy/addons/auto-pause/Dockerfile
index 13578e42bcb2..7cea4a7b1b78 100644
--- a/deploy/addons/auto-pause/Dockerfile
+++ b/deploy/addons/auto-pause/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.23.2 AS builder
+FROM golang:1.23.3 AS builder
 WORKDIR /app
 COPY go.mod go.sum ./
 RUN go mod download
diff --git a/deploy/gvisor/Dockerfile b/deploy/gvisor/Dockerfile
index 2ad7857d588c..7d4696387e1a 100644
--- a/deploy/gvisor/Dockerfile
+++ b/deploy/gvisor/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.23.2 AS builder
+FROM golang:1.23.3 AS builder
 WORKDIR /app
 COPY go.mod go.sum ./
 RUN go mod download
diff --git a/deploy/iso/minikube-iso/arch/aarch64/package/buildkit-bin-aarch64/buildkit-bin.hash b/deploy/iso/minikube-iso/arch/aarch64/package/buildkit-bin-aarch64/buildkit-bin.hash
index 6cc8a874d884..b24b60dd2b7d 100644
--- a/deploy/iso/minikube-iso/arch/aarch64/package/buildkit-bin-aarch64/buildkit-bin.hash
+++ b/deploy/iso/minikube-iso/arch/aarch64/package/buildkit-bin-aarch64/buildkit-bin.hash
@@ -14,3 +14,4 @@ sha256 dfa15ef3f194afc0f588de1e78053cdcd553e7de2f9692efe964c9aa7e9d621e  buildki
 sha256 608539ed0686f6533504ab43ed1005ab9c7bb45daec1cc5caa99de0c6314408c  buildkit-v0.15.1.linux-arm64.tar.gz
 sha256 15329adaa5e5b2bea0580f3e5e33765f84504075710bb791e362c3b160ca7e61  buildkit-v0.15.2.linux-arm64.tar.gz
 sha256 1b70bb7955ddda66537d4bf9aa540e79e79e19aa989901613da58f5f133a53ef  buildkit-v0.16.0.linux-arm64.tar.gz
+sha256 484a725519bd15a3b3d1f84c2dfc37749af6f06bc6c40d83395312e4d1fb18f1  buildkit-v0.18.1.linux-arm64.tar.gz
diff --git a/deploy/iso/minikube-iso/arch/aarch64/package/buildkit-bin-aarch64/buildkit-bin.mk b/deploy/iso/minikube-iso/arch/aarch64/package/buildkit-bin-aarch64/buildkit-bin.mk
index 17fb248a4931..25593db28a56 100644
--- a/deploy/iso/minikube-iso/arch/aarch64/package/buildkit-bin-aarch64/buildkit-bin.mk
+++ b/deploy/iso/minikube-iso/arch/aarch64/package/buildkit-bin-aarch64/buildkit-bin.mk
@@ -4,8 +4,8 @@
 #
 ################################################################################
 
-BUILDKIT_BIN_AARCH64_VERSION = v0.16.0
-BUILDKIT_BIN_AARCH64_COMMIT = 0865fcc9b78559e856e81dc52b3613701e7be28d
+BUILDKIT_BIN_AARCH64_VERSION = v0.18.1
+BUILDKIT_BIN_AARCH64_COMMIT = eb68885955169461d72dc2b7e6d084100fcaba86
 BUILDKIT_BIN_AARCH64_SITE = https://github.com/moby/buildkit/releases/download/$(BUILDKIT_BIN_AARCH64_VERSION)
 BUILDKIT_BIN_AARCH64_SOURCE = buildkit-$(BUILDKIT_BIN_AARCH64_VERSION).linux-arm64.tar.gz
 
diff --git a/deploy/iso/minikube-iso/arch/aarch64/package/cni-plugins-latest-aarch64/cni-plugins-latest.hash b/deploy/iso/minikube-iso/arch/aarch64/package/cni-plugins-latest-aarch64/cni-plugins-latest.hash
index ea7ae3eea398..95ebdaae4367 100644
--- a/deploy/iso/minikube-iso/arch/aarch64/package/cni-plugins-latest-aarch64/cni-plugins-latest.hash
+++ b/deploy/iso/minikube-iso/arch/aarch64/package/cni-plugins-latest-aarch64/cni-plugins-latest.hash
@@ -5,3 +5,4 @@ sha256 56fe62d73942cffd8f119d2b8ecb6a062e85f529a3dbfc7aa5cd83c2c01929a7  cni-plu
 sha256 ab38507efe50c34bc2242a25c5783c19fdfe0376c65a2a91d48174d4f39f1fc2  cni-plugins-linux-arm64-v1.5.0.tgz
 sha256 c2a292714d0fad98a3491ae43df8ad58354b3c0bdf5d5a3e281777967c70fcff  cni-plugins-linux-arm64-v1.5.1.tgz
 sha256 db09ab057ecf60b05ba05cbec38d55b95cc139c7f1078e2e4857cc13af158cee  cni-plugins-linux-arm64-v1.6.0.tgz
+sha256 f0f440b968ab50ad13d9d42d993ba98ec30b2ec666846f4ef1bddc7646a701cc  cni-plugins-linux-arm64-v1.6.1.tgz
diff --git a/deploy/iso/minikube-iso/arch/aarch64/package/cni-plugins-latest-aarch64/cni-plugins-latest.mk b/deploy/iso/minikube-iso/arch/aarch64/package/cni-plugins-latest-aarch64/cni-plugins-latest.mk
index f4c771c55d95..e1253ac638c4 100644
--- a/deploy/iso/minikube-iso/arch/aarch64/package/cni-plugins-latest-aarch64/cni-plugins-latest.mk
+++ b/deploy/iso/minikube-iso/arch/aarch64/package/cni-plugins-latest-aarch64/cni-plugins-latest.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-CNI_PLUGINS_LATEST_AARCH64_VERSION = v1.6.0
+CNI_PLUGINS_LATEST_AARCH64_VERSION = v1.6.1
 CNI_PLUGINS_LATEST_AARCH64_SITE = https://github.com/containernetworking/plugins/releases/download/$(CNI_PLUGINS_LATEST_AARCH64_VERSION)
 CNI_PLUGINS_LATEST_AARCH64_SOURCE = cni-plugins-linux-arm64-$(CNI_PLUGINS_LATEST_AARCH64_VERSION).tgz
 CNI_PLUGINS_LATEST_AARCH64_LICENSE = Apache-2.0
diff --git a/deploy/iso/minikube-iso/arch/aarch64/package/nerdctl-bin-aarch64/nerdctl-bin.hash b/deploy/iso/minikube-iso/arch/aarch64/package/nerdctl-bin-aarch64/nerdctl-bin.hash
index afd5e28ff006..e4b870c13ee8 100644
--- a/deploy/iso/minikube-iso/arch/aarch64/package/nerdctl-bin-aarch64/nerdctl-bin.hash
+++ b/deploy/iso/minikube-iso/arch/aarch64/package/nerdctl-bin-aarch64/nerdctl-bin.hash
@@ -9,3 +9,4 @@ sha256 d8df47708ca57b9cd7f498055126ba7dcfc811d9ba43aae1830c93a09e70e22d  nerdctl
 sha256 a53d87fc7d1f4ffeec55e5e08d2397b02ada0d334874c3cece306ad36f828a6c  nerdctl-1.7.5-linux-arm64.tar.gz
 sha256 4fa0a6e936c7a9cb9bb81e784fddaa593cb00afb48b08842e3f0503748c21348  nerdctl-1.7.6-linux-arm64.tar.gz
 sha256 230ad8f4f88100774d123213a427d3d43071e0dcf9f70efbea50ab9efff1cd4c  nerdctl-1.7.7-linux-arm64.tar.gz
+sha256 cbca59744f6e9dea962e1d3a754294b5e64b53b82f4f7f7d603a591f38545fd5  nerdctl-2.0.1-linux-arm64.tar.gz
diff --git a/deploy/iso/minikube-iso/arch/aarch64/package/nerdctl-bin-aarch64/nerdctl-bin.mk b/deploy/iso/minikube-iso/arch/aarch64/package/nerdctl-bin-aarch64/nerdctl-bin.mk
index 9a3f834c788a..92bb7b1ff25b 100644
--- a/deploy/iso/minikube-iso/arch/aarch64/package/nerdctl-bin-aarch64/nerdctl-bin.mk
+++ b/deploy/iso/minikube-iso/arch/aarch64/package/nerdctl-bin-aarch64/nerdctl-bin.mk
@@ -4,8 +4,8 @@
 #
 ################################################################################
 
-NERDCTL_BIN_AARCH64_VERSION = 1.7.7
-NERDCTL_BIN_AARCH64_COMMIT = 5882c720f4e7f358fb26b759e514b3ae9dd8ea83
+NERDCTL_BIN_AARCH64_VERSION = 2.0.1
+NERDCTL_BIN_AARCH64_COMMIT = 47f31ff2c1615c1accb85c1ce4e7882ad739102f
 NERDCTL_BIN_AARCH64_SITE = https://github.com/containerd/nerdctl/releases/download/v$(NERDCTL_BIN_AARCH64_VERSION)
 NERDCTL_BIN_AARCH64_SOURCE = nerdctl-$(NERDCTL_BIN_AARCH64_VERSION)-linux-arm64.tar.gz
 NERDCTL_BIN_AARCH64_STRIP_COMPONENTS = 0
diff --git a/deploy/iso/minikube-iso/arch/x86_64/package/buildkit-bin/buildkit-bin.hash b/deploy/iso/minikube-iso/arch/x86_64/package/buildkit-bin/buildkit-bin.hash
index cd239fa12286..55b13a66e2d7 100644
--- a/deploy/iso/minikube-iso/arch/x86_64/package/buildkit-bin/buildkit-bin.hash
+++ b/deploy/iso/minikube-iso/arch/x86_64/package/buildkit-bin/buildkit-bin.hash
@@ -18,3 +18,4 @@ sha256 803de21f1656b2f0398e09204abcff2943c17b6b5951fe5ccfc8300012fcb838  buildki
 sha256 e433c3d3484ad5c13a74435a28ba96334369c9ecce13b4ed0e310ad5f90f7060  buildkit-v0.15.1.linux-amd64.tar.gz
 sha256 59279df5853bef19a03ec15c5c31b772e59d91d079ab0221e1bafa023cf41c35  buildkit-v0.15.2.linux-amd64.tar.gz
 sha256 a07a01da821d39bdb6e03a2f98ee407bb861cc61ece2e69e2ea4d61b3a4ab7f1  buildkit-v0.16.0.linux-amd64.tar.gz
+sha256 02b986569330f09dc837486f80d9818812aba1ac8bd892b337adeb56eafe3794  buildkit-v0.18.1.linux-amd64.tar.gz
diff --git a/deploy/iso/minikube-iso/arch/x86_64/package/buildkit-bin/buildkit-bin.mk b/deploy/iso/minikube-iso/arch/x86_64/package/buildkit-bin/buildkit-bin.mk
index a03af4b9abbe..b0c395250abe 100644
--- a/deploy/iso/minikube-iso/arch/x86_64/package/buildkit-bin/buildkit-bin.mk
+++ b/deploy/iso/minikube-iso/arch/x86_64/package/buildkit-bin/buildkit-bin.mk
@@ -4,8 +4,8 @@
 #
 ################################################################################
 
-BUILDKIT_BIN_VERSION = v0.16.0
-BUILDKIT_BIN_COMMIT = 0865fcc9b78559e856e81dc52b3613701e7be28d
+BUILDKIT_BIN_VERSION = v0.18.1
+BUILDKIT_BIN_COMMIT = eb68885955169461d72dc2b7e6d084100fcaba86
 BUILDKIT_BIN_SITE = https://github.com/moby/buildkit/releases/download/$(BUILDKIT_BIN_VERSION)
 BUILDKIT_BIN_SOURCE = buildkit-$(BUILDKIT_BIN_VERSION).linux-amd64.tar.gz
 
diff --git a/deploy/iso/minikube-iso/arch/x86_64/package/cni-plugins-latest/cni-plugins-latest.hash b/deploy/iso/minikube-iso/arch/x86_64/package/cni-plugins-latest/cni-plugins-latest.hash
index 32424b54ac72..8f10d7bf599a 100644
--- a/deploy/iso/minikube-iso/arch/x86_64/package/cni-plugins-latest/cni-plugins-latest.hash
+++ b/deploy/iso/minikube-iso/arch/x86_64/package/cni-plugins-latest/cni-plugins-latest.hash
@@ -9,3 +9,4 @@ sha256 2a0ea7072d1806b8526489bcd3b4847a06ab010ee32ba3c3d4e5a3235d3eb138  cni-plu
 sha256 57a18478422cb321370e30a5ee6ce026321289cd9c94353ca697dddd7714f1a5  cni-plugins-linux-amd64-v1.5.0.tgz
 sha256 77baa2f669980a82255ffa2f2717de823992480271ee778aa51a9c60ae89ff9b  cni-plugins-linux-amd64-v1.5.1.tgz
 sha256 682b49ff8933a997a52107161f1745f8312364b4c7f605ccdf7a77499130d89d  cni-plugins-linux-amd64-v1.6.0.tgz
+sha256 2503ce29ac445715ebe146073f45468153f9e28f45fa173cb060cfd9e735f563  cni-plugins-linux-amd64-v1.6.1.tgz
diff --git a/deploy/iso/minikube-iso/arch/x86_64/package/cni-plugins-latest/cni-plugins-latest.mk b/deploy/iso/minikube-iso/arch/x86_64/package/cni-plugins-latest/cni-plugins-latest.mk
index 4eac18fb9392..990d96d674ac 100644
--- a/deploy/iso/minikube-iso/arch/x86_64/package/cni-plugins-latest/cni-plugins-latest.mk
+++ b/deploy/iso/minikube-iso/arch/x86_64/package/cni-plugins-latest/cni-plugins-latest.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-CNI_PLUGINS_LATEST_VERSION = v1.6.0
+CNI_PLUGINS_LATEST_VERSION = v1.6.1
 CNI_PLUGINS_LATEST_SITE = https://github.com/containernetworking/plugins/releases/download/$(CNI_PLUGINS_LATEST_VERSION)
 CNI_PLUGINS_LATEST_SOURCE = cni-plugins-linux-amd64-$(CNI_PLUGINS_LATEST_VERSION).tgz
 CNI_PLUGINS_LATEST_LICENSE = Apache-2.0
diff --git a/deploy/iso/minikube-iso/arch/x86_64/package/nerdctl-bin/nerdctl-bin.hash b/deploy/iso/minikube-iso/arch/x86_64/package/nerdctl-bin/nerdctl-bin.hash
index af8717f8afac..d27cb8315ad0 100644
--- a/deploy/iso/minikube-iso/arch/x86_64/package/nerdctl-bin/nerdctl-bin.hash
+++ b/deploy/iso/minikube-iso/arch/x86_64/package/nerdctl-bin/nerdctl-bin.hash
@@ -9,3 +9,4 @@ sha256 71aee9d987b7fad0ff2ade50b038ad7e2356324edc02c54045960a3521b3e6a7  nerdctl
 sha256 775f8bddd5e93acc4162c568dd6b84d5925549180991b83cfd4b7e33d4844921  nerdctl-1.7.5-linux-amd64.tar.gz
 sha256 0326d6a42dbec5c104ed9d7aa8cbc62727433dbe000cf21cc29d06b22507e0f0  nerdctl-1.7.6-linux-amd64.tar.gz
 sha256 298bb95aee485b24d566115ef7e4e90951dd232447b05de5646a652a23db70a9  nerdctl-1.7.7-linux-amd64.tar.gz
+sha256 96e5e3ed79f189a986cd33a40b0c817d7b6c7d9238f51a0737213f409e5d82af  nerdctl-2.0.1-linux-amd64.tar.gz
diff --git a/deploy/iso/minikube-iso/arch/x86_64/package/nerdctl-bin/nerdctl-bin.mk b/deploy/iso/minikube-iso/arch/x86_64/package/nerdctl-bin/nerdctl-bin.mk
index ae5f6baf0f4a..89197eb54175 100644
--- a/deploy/iso/minikube-iso/arch/x86_64/package/nerdctl-bin/nerdctl-bin.mk
+++ b/deploy/iso/minikube-iso/arch/x86_64/package/nerdctl-bin/nerdctl-bin.mk
@@ -4,8 +4,8 @@
 # 
 ################################################################################
 
-NERDCTL_BIN_VERSION = 1.7.7
-NERDCTL_BIN_COMMIT = 5882c720f4e7f358fb26b759e514b3ae9dd8ea83
+NERDCTL_BIN_VERSION = 2.0.1
+NERDCTL_BIN_COMMIT = 47f31ff2c1615c1accb85c1ce4e7882ad739102f
 NERDCTL_BIN_SITE = https://github.com/containerd/nerdctl/releases/download/v$(NERDCTL_BIN_VERSION)
 NERDCTL_BIN_SOURCE = nerdctl-$(NERDCTL_BIN_AARCH64_VERSION)-linux-amd64.tar.gz
 NERDCTL_BIN_STRIP_COMPONENTS = 0
diff --git a/deploy/iso/minikube-iso/go.hash b/deploy/iso/minikube-iso/go.hash
index 6741165935c0..22468afe0717 100644
--- a/deploy/iso/minikube-iso/go.hash
+++ b/deploy/iso/minikube-iso/go.hash
@@ -32,3 +32,4 @@ sha256  ac9c723f224969aee624bc34fd34c9e13f2a212d75c71c807de644bb46e112f6  go1.22
 sha256  42b7a8e80d805daa03022ed3fde4321d4c3bf2c990a144165d01eeecd6f699c6  go1.23.0.src.tar.gz
 sha256  6ee44e298379d146a5e5aa6b1c5b5d5f5d0a3365eabdd70741e6e21340ec3b0d  go1.23.1.src.tar.gz
 sha256  36930162a93df417d90bd22c6e14daff4705baac2b02418edda671cdfa9cd07f  go1.23.2.src.tar.gz
+sha256  8d6a77332487557c6afa2421131b50f83db4ae3c579c3bc72e670ee1f6968599  go1.23.3.src.tar.gz
diff --git a/deploy/iso/minikube-iso/package/runc-master/runc-master.hash b/deploy/iso/minikube-iso/package/runc-master/runc-master.hash
index 375decffbcd1..d3fc43dc3798 100644
--- a/deploy/iso/minikube-iso/package/runc-master/runc-master.hash
+++ b/deploy/iso/minikube-iso/package/runc-master/runc-master.hash
@@ -25,3 +25,4 @@ sha256 be31b07d6a54a8f234016501c300ad04b6c428c56588e7eca8c3b663308db208 v1.1.12.
 sha256 789d5749a08ef1fbe5d1999b67883206a68a4e58e6ca0151c411d678f3480b25 v1.1.13.tar.gz
 sha256 563cf57c38d2e7149234dbe6f63ca0751eb55ef8f586ed12a543dedc1aceba68 v1.1.14.tar.gz
 sha256 8446718a107f3e437bc33a4c9b89b94cb24ae58ed0a49d08cd83ac7d39980860 v1.1.15.tar.gz
+sha256 0eabc936d481d123be92c429588f9d1de7cafd36b37a8a5085b1412e758796a1 v1.2.2.tar.gz
diff --git a/deploy/iso/minikube-iso/package/runc-master/runc-master.mk b/deploy/iso/minikube-iso/package/runc-master/runc-master.mk
index aaaedc571e86..0f6bed42e460 100644
--- a/deploy/iso/minikube-iso/package/runc-master/runc-master.mk
+++ b/deploy/iso/minikube-iso/package/runc-master/runc-master.mk
@@ -4,8 +4,8 @@
 #
 ################################################################################
 
-RUNC_MASTER_VERSION = v1.1.15
-RUNC_MASTER_COMMIT = bc20cb4497af9af01bea4a8044f1678ffca2745c
+RUNC_MASTER_VERSION = v1.2.2
+RUNC_MASTER_COMMIT = 7cb363254b69e10320360b63fb73e0ffb5da7bf2
 RUNC_MASTER_SITE = https://github.com/opencontainers/runc/archive
 RUNC_MASTER_SOURCE = $(RUNC_MASTER_VERSION).tar.gz
 RUNC_MASTER_LICENSE = Apache-2.0
diff --git a/deploy/kicbase/Dockerfile b/deploy/kicbase/Dockerfile
index eb30af4c68be..ccfd9bd468e4 100644
--- a/deploy/kicbase/Dockerfile
+++ b/deploy/kicbase/Dockerfile
@@ -21,7 +21,7 @@
 # this ARG needs to be global to use it in `FROM` & is updated for new versions of ubuntu:jammy-*
 ARG UBUNTU_JAMMY_IMAGE="ubuntu:jammy-20240911.1"
 # multi-stage docker build so we can build auto-pause for arm64
-FROM golang:1.23.2 as auto-pause
+FROM golang:1.23.3 as auto-pause
 WORKDIR /src
 # auto-pause depends on core minikube code so we need to pass the whole source code as the context
 # copy in the minimal amount of source code possible
@@ -41,13 +41,13 @@ RUN if [ "$PREBUILT_AUTO_PAUSE" != "true" ]; then cd ./cmd/auto-pause/ && go bui
 # for a kubernetes node image, it doesn't contain much we don't need
 FROM ${UBUNTU_JAMMY_IMAGE} as kicbase
 
-ARG BUILDKIT_VERSION="v0.16.0"
+ARG BUILDKIT_VERSION="v0.18.1"
 ARG CRIO_VERSION="1.24"
 ARG CRI_DOCKERD_VERSION="v0.3.15"
 ARG CRI_DOCKERD_COMMIT="c1c566e0cc84abe6972f0bf857ecd8fe306258d9"
 ARG CNI_PLUGINS_VERSION="v1.4.0"
 ARG TARGETARCH
-ARG NERDCTL_VERSION="1.7.7"
+ARG NERDCTL_VERSION="2.0.1"
 ARG NERDCTLD_VERSION="0.6.1"
 
 # copy in static files (configs, scripts)
diff --git a/hack/jenkins/installers/check_install_golang.ps1 b/hack/jenkins/installers/check_install_golang.ps1
index c15399eafcba..d8de3ac893e1 100644
--- a/hack/jenkins/installers/check_install_golang.ps1
+++ b/hack/jenkins/installers/check_install_golang.ps1
@@ -31,7 +31,7 @@ AddToPathIfMissing -pathToAdd "C:\Program Files\Go\bin" -scope "Machine"
 AddToPathIfMissing -pathToAdd "$HOME\go\bin" -scope "User"
 
 # Download Go
-$GoVersion = "1.23.2"
+$GoVersion = "1.23.3"
 $CurrentGo = go version
 if ((!$?) -or ($CurrentGo -NotLike "*$GoVersion*")) {
     (New-Object Net.WebClient).DownloadFile("https://go.dev/dl/go$GoVersion.windows-amd64.zip", "$env:TEMP\golang.zip")
diff --git a/hack/jenkins/installers/check_install_golang.sh b/hack/jenkins/installers/check_install_golang.sh
index f1d1c6545f5c..09899b2fcc9d 100755
--- a/hack/jenkins/installers/check_install_golang.sh
+++ b/hack/jenkins/installers/check_install_golang.sh
@@ -22,7 +22,7 @@ if (($# < 1)); then
   exit 1
 fi
 
-VERSION_TO_INSTALL=1.23.2
+VERSION_TO_INSTALL=1.23.3
 INSTALL_PATH=${1}
 
 function current_arch() {
diff --git a/hack/kicbase_version/os-package-list.txt b/hack/kicbase_version/os-package-list.txt
index cc76f69fcdad..9426954f10f2 100644
--- a/hack/kicbase_version/os-package-list.txt
+++ b/hack/kicbase_version/os-package-list.txt
@@ -16,15 +16,15 @@ ii  ca-certificates                 20240203~22.04.1                        all
 ii  catatonit                       0.1.7-1                                 amd64        init process for containers
 ii  conmon                          100:2.1.2~0                             amd64        OCI container runtime monitor
 ii  conntrack                       1:1.4.6-2build2                         amd64        Program to modify the conntrack tables
-ii  containerd.io                   1.7.22-1                                amd64        An open and reliable container runtime
-ii  containernetworking-plugins     0.9.1+ds1-1                             amd64        standard networking plugins - binaries
+ii  containerd.io                   1.7.24-1                                amd64        An open and reliable container runtime
+ii  containernetworking-plugins     0.9.1+ds1-1ubuntu0.1                    amd64        standard networking plugins - binaries
 ii  coreutils                       8.32-4.1ubuntu1.2                       amd64        GNU core utilities
 ii  cri-o                           1.24.6~0                                amd64        OCI-based implementation of Kubernetes Container Runtime Interface.
 ii  cri-o-runc                      1.1.12~0                                amd64        Open Container Project - runtime
 ii  cri-tools                       1.25.0~0                                amd64        A command line tool used for creating OCI images.
 ii  criu                            4.0-3                                   amd64        checkpoint and restore in userspace
 ii  crun                            100:1.2-2                               amd64        OCI runtime written in C
-ii  curl                            7.81.0-1ubuntu1.18                      amd64        command line tool for transferring data with URL syntax
+ii  curl                            7.81.0-1ubuntu1.19                      amd64        command line tool for transferring data with URL syntax
 ii  dash                            0.5.11+git20210903+057cd650a4ed-3build1 amd64        POSIX-compliant shell
 ii  debconf                         1.5.79ubuntu1                           all          Debian configuration management system
 ii  debianutils                     5.5-1ubuntu2                            amd64        Miscellaneous utilities specific to Debian
@@ -83,7 +83,7 @@ ii  libcbor0.8:amd64                0.8.0-2ubuntu1                          amd6
 ii  libcom-err2:amd64               1.46.5-2ubuntu1.2                       amd64        common error description library
 ii  libcrypt1:amd64                 1:4.4.27-1                              amd64        libcrypt shared library
 ii  libcryptsetup12:amd64           2:2.4.3-1ubuntu1.2                      amd64        disk encryption support - shared library
-ii  libcurl4:amd64                  7.81.0-1ubuntu1.18                      amd64        easy-to-use client-side URL transfer library (OpenSSL flavour)
+ii  libcurl4:amd64                  7.81.0-1ubuntu1.19                      amd64        easy-to-use client-side URL transfer library (OpenSSL flavour)
 ii  libdb5.3:amd64                  5.3.28+dfsg1-0.8ubuntu3                 amd64        Berkeley v5.3 Database Libraries [runtime]
 ii  libdebconfclient0:amd64         0.261ubuntu1                            amd64        Debian Configuration Management System (C-implementation library)
 ii  libdevmapper1.02.1:amd64        2:1.02.175-2.1ubuntu4                   amd64        Linux Kernel Device Mapper userspace library
@@ -96,7 +96,7 @@ ii  libffi8:amd64                   3.4.2-4                                 amd6
 ii  libfido2-1:amd64                1.10.0-1                                amd64        library for generating and verifying FIDO 2.0 objects
 ii  libgcc-s1:amd64                 12.3.0-1ubuntu1~22.04                   amd64        GCC support library
 ii  libgcrypt20:amd64               1.9.4-3ubuntu3                          amd64        LGPL Crypto library - runtime library
-ii  libglib2.0-0:amd64              2.72.4-0ubuntu2.3                       amd64        GLib library of C routines
+ii  libglib2.0-0:amd64              2.72.4-0ubuntu2.4                       amd64        GLib library of C routines
 ii  libgmp10:amd64                  2:6.2.1+dfsg-3ubuntu1                   amd64        Multiprecision arithmetic library
 ii  libgnutls30:amd64               3.7.3-4ubuntu1.5                        amd64        GNU TLS library - main runtime library
 ii  libgpg-error0:amd64             1.43-3                                  amd64        GnuPG development runtime library
@@ -137,8 +137,8 @@ ii  libnghttp2-14:amd64             1.43.0-1ubuntu0.2                       amd6
 ii  libnl-3-200:amd64               3.5.0-0.1                               amd64        library for dealing with netlink sockets
 ii  libnpth0:amd64                  1.6-3build2                             amd64        replacement for GNU Pth using system threads
 ii  libnsl2:amd64                   1.3.0-2build2                           amd64        Public client interface for NIS(YP) and NIS+
-ii  libnvidia-container-tools       1.17.0-1                                amd64        NVIDIA container runtime library (command-line tools)
-ii  libnvidia-container1:amd64      1.17.0-1                                amd64        NVIDIA container runtime library
+ii  libnvidia-container-tools       1.17.3-1                                amd64        NVIDIA container runtime library (command-line tools)
+ii  libnvidia-container1:amd64      1.17.3-1                                amd64        NVIDIA container runtime library
 ii  libp11-kit0:amd64               0.24.0-6build1                          amd64        library for loading and coordinating access to PKCS#11 modules - runtime
 ii  libpam-modules:amd64            1.4.0-11ubuntu2.4                       amd64        Pluggable Authentication Modules for PAM
 ii  libpam-modules-bin              1.4.0-11ubuntu2.4                       amd64        Pluggable Authentication Modules for PAM - helper binaries
@@ -152,8 +152,8 @@ ii  libprotobuf-c1:amd64            1.3.3-1ubuntu2.1                        amd6
 ii  libprotobuf23:amd64             3.12.4-1ubuntu7.22.04.1                 amd64        protocol buffers C++ library
 ii  libpsl5:amd64                   0.21.0-1.2build2                        amd64        Library for Public Suffix List (shared libraries)
 ii  libpython3-stdlib:amd64         3.10.6-1~22.04.1                        amd64        interactive high-level object-oriented language (default python3 version)
-ii  libpython3.10-minimal:amd64     3.10.12-1~22.04.6                       amd64        Minimal subset of the Python language (version 3.10)
-ii  libpython3.10-stdlib:amd64      3.10.12-1~22.04.6                       amd64        Interactive high-level object-oriented language (standard library, version 3.10)
+ii  libpython3.10-minimal:amd64     3.10.12-1~22.04.7                       amd64        Minimal subset of the Python language (version 3.10)
+ii  libpython3.10-stdlib:amd64      3.10.12-1~22.04.7                       amd64        Interactive high-level object-oriented language (standard library, version 3.10)
 ii  libreadline8:amd64              8.1.2-1                                 amd64        GNU readline and history libraries, run-time libraries
 ii  librtmp1:amd64                  2.4+20151223.gitfa8646d.1-2build4       amd64        toolkit for RTMP streams (shared library)
 ii  libsasl2-2:amd64                2.1.27+dfsg2-3ubuntu1.2                 amd64        Cyrus SASL - authentication abstraction library
@@ -196,8 +196,8 @@ ii  ncurses-bin                     6.3-2ubuntu0.1                          amd6
 ii  netbase                         6.3                                     all          Basic TCP/IP networking system
 ii  netcat-openbsd                  1.218-4ubuntu1                          amd64        TCP/IP swiss army knife
 ii  nfs-common                      1:2.6.1-1ubuntu1.2                      amd64        NFS support files common to client and server
-ii  nvidia-container-toolkit        1.17.0-1                                amd64        NVIDIA Container toolkit
-ii  nvidia-container-toolkit-base   1.17.0-1                                amd64        NVIDIA Container Toolkit Base
+ii  nvidia-container-toolkit        1.17.3-1                                amd64        NVIDIA Container toolkit
+ii  nvidia-container-toolkit-base   1.17.3-1                                amd64        NVIDIA Container Toolkit Base
 ii  openssh-client                  1:8.9p1-3ubuntu0.10                     amd64        secure shell (SSH) client, for secure access to remote machines
 ii  openssh-server                  1:8.9p1-3ubuntu0.10                     amd64        secure shell (SSH) server, for secure access from remote machines
 ii  openssh-sftp-server             1:8.9p1-3ubuntu0.10                     amd64        secure shell (SSH) sftp server module, for SFTP access from remote machines
@@ -206,15 +206,15 @@ ii  passwd                          1:4.8.1-2ubuntu2.2                      amd6
 ii  perl-base                       5.34.0-3ubuntu1.3                       amd64        minimal Perl system
 ii  pigz                            2.6-1                                   amd64        Parallel Implementation of GZip
 ii  pinentry-curses                 1.1.1-1build2                           amd64        curses-based PIN or pass-phrase entry dialog for GnuPG
-ii  podman                          3.4.4+ds1-1ubuntu1.22.04.2              amd64        engine to run OCI-based containers in Pods
+ii  podman                          3.4.4+ds1-1ubuntu1.22.04.3              amd64        engine to run OCI-based containers in Pods
 ii  procps                          2:3.3.17-6ubuntu2.1                     amd64        /proc file system utilities
 ii  python3                         3.10.6-1~22.04.1                        amd64        interactive high-level object-oriented language (default python3 version)
 ii  python3-minimal                 3.10.6-1~22.04.1                        amd64        minimal subset of the Python language (default python3 version)
 ii  python3-pkg-resources           59.6.0-1.2ubuntu0.22.04.2               all          Package Discovery and Resource Access using pkg_resources
 ii  python3-protobuf                3.12.4-1ubuntu7.22.04.1                 amd64        Python 3 bindings for protocol buffers
 ii  python3-six                     1.16.0-3ubuntu1                         all          Python 2 and 3 compatibility library (Python 3 interface)
-ii  python3.10                      3.10.12-1~22.04.6                       amd64        Interactive high-level object-oriented language (version 3.10)
-ii  python3.10-minimal              3.10.12-1~22.04.6                       amd64        Minimal subset of the Python language (version 3.10)
+ii  python3.10                      3.10.12-1~22.04.7                       amd64        Interactive high-level object-oriented language (version 3.10)
+ii  python3.10-minimal              3.10.12-1~22.04.7                       amd64        Minimal subset of the Python language (version 3.10)
 ii  readline-common                 8.1.2-1                                 all          GNU readline and history libraries, common files
 ii  rpcbind                         1.2.6-2build1                           amd64        converts RPC program numbers into universal addresses
 ii  rsync                           3.2.7-0ubuntu0.22.04.2                  amd64        fast, versatile, remote (and local) file-copying tool
@@ -231,7 +231,7 @@ ii  ucf                             3.0043                                  all
 ii  udev                            249.11-0ubuntu3.12                      amd64        /dev/ and hotplug management daemon
 ii  usrmerge                        25ubuntu2                               all          Convert the system to the merged /usr directories scheme
 ii  util-linux                      2.37.2-4ubuntu3.4                       amd64        miscellaneous system utilities
-ii  vim-common                      2:8.2.3995-1ubuntu2.19                  all          Vi IMproved - Common files
-ii  vim-tiny                        2:8.2.3995-1ubuntu2.19                  amd64        Vi IMproved - enhanced vi editor - compact version
-ii  xxd                             2:8.2.3995-1ubuntu2.19                  amd64        tool to make (or reverse) a hex dump
+ii  vim-common                      2:8.2.3995-1ubuntu2.21                  all          Vi IMproved - Common files
+ii  vim-tiny                        2:8.2.3995-1ubuntu2.21                  amd64        Vi IMproved - enhanced vi editor - compact version
+ii  xxd                             2:8.2.3995-1ubuntu2.21                  amd64        tool to make (or reverse) a hex dump
 ii  zlib1g:amd64                    1:1.2.11.dfsg-2ubuntu9.2                amd64        compression library - runtime
diff --git a/pkg/drivers/kic/types.go b/pkg/drivers/kic/types.go
index ed1a11b1562c..dffe66cd545f 100644
--- a/pkg/drivers/kic/types.go
+++ b/pkg/drivers/kic/types.go
@@ -24,10 +24,10 @@ import (
 
 const (
 	// Version is the current version of kic
-	Version = "v0.0.45-1730888964-19917"
+	Version = "v0.0.45-1733346445-20044"
 
 	// SHA of the kic base image
-	baseImageSHA = "629a5748e3ec15a091fef12257eb3754b8ffc0c974ebcbb016451c65d1829615"
+	baseImageSHA = "6a5b82a733726dfa5de56dfdd15984eb66288e2b42a8ec92cad6aae09c402153"
 	// The name of the GCR kicbase repository
 	gcrRepo = "gcr.io/k8s-minikube/kicbase-builds"
 	// The name of the Dockerhub kicbase repository
diff --git a/pkg/minikube/download/iso.go b/pkg/minikube/download/iso.go
index 2a248a0f19f6..70885a20aa6d 100644
--- a/pkg/minikube/download/iso.go
+++ b/pkg/minikube/download/iso.go
@@ -41,7 +41,7 @@ const fileScheme = "file"
 // DefaultISOURLs returns a list of ISO URL's to consult by default, in priority order
 func DefaultISOURLs() []string {
 	v := version.GetISOVersion()
-	isoBucket := "minikube-builds/iso/19917"
+	isoBucket := "minikube-builds/iso/20044"
 
 	return []string{
 		fmt.Sprintf("https://storage.googleapis.com/%s/minikube-%s-%s.iso", isoBucket, v, runtime.GOARCH),
diff --git a/site/content/en/docs/commands/start.md b/site/content/en/docs/commands/start.md
index e8c3c96b014f..c2d7cf6f51c5 100644
--- a/site/content/en/docs/commands/start.md
+++ b/site/content/en/docs/commands/start.md
@@ -27,7 +27,7 @@ minikube start [flags]
       --apiserver-port int                The apiserver listening port (default 8443)
       --auto-pause-interval duration      Duration of inactivity before the minikube VM is paused (default 1m0s) (default 1m0s)
       --auto-update-drivers               If set, automatically updates drivers to the latest version. Defaults to true. (default true)
-      --base-image string                 The base image to use for docker/podman drivers. Intended for local development. (default "gcr.io/k8s-minikube/kicbase-builds:v0.0.45-1730888964-19917@sha256:629a5748e3ec15a091fef12257eb3754b8ffc0c974ebcbb016451c65d1829615")
+      --base-image string                 The base image to use for docker/podman drivers. Intended for local development. (default "gcr.io/k8s-minikube/kicbase-builds:v0.0.45-1733346445-20044@sha256:6a5b82a733726dfa5de56dfdd15984eb66288e2b42a8ec92cad6aae09c402153")
       --binary-mirror string              Location to fetch kubectl, kubelet, & kubeadm binaries from.
       --cache-images                      If true, cache docker images for the current bootstrapper and load them into the machine. Always false with --driver=none. (default true)
       --cert-expiration duration          Duration until minikube certificate expiration, defaults to three years (26280h). (default 26280h0m0s)