diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 4827a203b5ad..04174ffdf9ed 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -12,7 +12,7 @@ on:
       - "!deploy/iso/**"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 4d70a97db554..4dbd395cb0b6 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -6,7 +6,7 @@ on:
       - master
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/functional_verified.yml b/.github/workflows/functional_verified.yml
index 36f585a1ff75..fd1c5b3e43c6 100644
--- a/.github/workflows/functional_verified.yml
+++ b/.github/workflows/functional_verified.yml
@@ -22,7 +22,7 @@ on:
       - deleted
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 
 permissions:
   contents: read
diff --git a/.github/workflows/leaderboard.yml b/.github/workflows/leaderboard.yml
index 5667c3611d10..3dbd190b02ff 100644
--- a/.github/workflows/leaderboard.yml
+++ b/.github/workflows/leaderboard.yml
@@ -6,7 +6,7 @@ on:
       - 'v*-beta.*'
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml
index 925d61507643..64c656855c37 100644
--- a/.github/workflows/master.yml
+++ b/.github/workflows/master.yml
@@ -14,7 +14,7 @@ on:
       - "!deploy/iso/**"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/minikube-image-benchmark.yml b/.github/workflows/minikube-image-benchmark.yml
index ee5ab160c846..032f2f92aec3 100644
--- a/.github/workflows/minikube-image-benchmark.yml
+++ b/.github/workflows/minikube-image-benchmark.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 2,14 * * *"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index d9a4db0be923..02f3a3377c31 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -12,7 +12,7 @@ on:
       - "!deploy/iso/**"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/sync-minikube.yml b/.github/workflows/sync-minikube.yml
index 4195d83792be..d74faeed5502 100644
--- a/.github/workflows/sync-minikube.yml
+++ b/.github/workflows/sync-minikube.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 2,14 * * *"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/time-to-k8s-public-chart.yml b/.github/workflows/time-to-k8s-public-chart.yml
index c45ab29fe26a..29c2017580fd 100644
--- a/.github/workflows/time-to-k8s-public-chart.yml
+++ b/.github/workflows/time-to-k8s-public-chart.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 2,14 * * *"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/time-to-k8s.yml b/.github/workflows/time-to-k8s.yml
index 005c38d725b6..363abf95d033 100644
--- a/.github/workflows/time-to-k8s.yml
+++ b/.github/workflows/time-to-k8s.yml
@@ -5,7 +5,7 @@ on:
     types: [released]
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/translations.yml b/.github/workflows/translations.yml
index ac95c79b3056..f032a2a9a1a8 100644
--- a/.github/workflows/translations.yml
+++ b/.github/workflows/translations.yml
@@ -6,7 +6,7 @@ on:
       - "translations/**"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-buildkit-version.yml b/.github/workflows/update-buildkit-version.yml
index c6906fb2f272..79554a3e274e 100644
--- a/.github/workflows/update-buildkit-version.yml
+++ b/.github/workflows/update-buildkit-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 3"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-calico-version.yml b/.github/workflows/update-calico-version.yml
index cdd045726e3a..8219122dab1e 100644
--- a/.github/workflows/update-calico-version.yml
+++ b/.github/workflows/update-calico-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-cloud-spanner-emulator-version.yml b/.github/workflows/update-cloud-spanner-emulator-version.yml
index c2abfaab469a..bc4ec8b1a697 100644
--- a/.github/workflows/update-cloud-spanner-emulator-version.yml
+++ b/.github/workflows/update-cloud-spanner-emulator-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-cni-plugins-version.yml b/.github/workflows/update-cni-plugins-version.yml
index d4c67a07bbe8..cb00a9564e24 100644
--- a/.github/workflows/update-cni-plugins-version.yml
+++ b/.github/workflows/update-cni-plugins-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-containerd-version.yml b/.github/workflows/update-containerd-version.yml
index f7657ea30188..e52b629f31c9 100644
--- a/.github/workflows/update-containerd-version.yml
+++ b/.github/workflows/update-containerd-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-cri-dockerd-version.yml b/.github/workflows/update-cri-dockerd-version.yml
index fd7bed218faf..967904dde5d7 100644
--- a/.github/workflows/update-cri-dockerd-version.yml
+++ b/.github/workflows/update-cri-dockerd-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-cri-o-version.yml b/.github/workflows/update-cri-o-version.yml
index 45fdfd626b3f..662c87bd819c 100644
--- a/.github/workflows/update-cri-o-version.yml
+++ b/.github/workflows/update-cri-o-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 5"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-crictl-version.yml b/.github/workflows/update-crictl-version.yml
index 28c270ee99ae..213c028d3dd3 100644
--- a/.github/workflows/update-crictl-version.yml
+++ b/.github/workflows/update-crictl-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 3"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-docker-buildx-version.yml b/.github/workflows/update-docker-buildx-version.yml
index d0e5a4fec594..08d6ad6373fb 100644
--- a/.github/workflows/update-docker-buildx-version.yml
+++ b/.github/workflows/update-docker-buildx-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-docker-version.yml b/.github/workflows/update-docker-version.yml
index 2f92b979e36d..6c3d0e84e717 100644
--- a/.github/workflows/update-docker-version.yml
+++ b/.github/workflows/update-docker-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 4"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-docsy-version.yml b/.github/workflows/update-docsy-version.yml
index 3d57971d8238..63bfc664895d 100644
--- a/.github/workflows/update-docsy-version.yml
+++ b/.github/workflows/update-docsy-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-flannel-version.yml b/.github/workflows/update-flannel-version.yml
index a68417d68c91..378a532687c9 100644
--- a/.github/workflows/update-flannel-version.yml
+++ b/.github/workflows/update-flannel-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-gcp-auth-version.yml b/.github/workflows/update-gcp-auth-version.yml
index 10758df3659d..35f93f5ce5c6 100644
--- a/.github/workflows/update-gcp-auth-version.yml
+++ b/.github/workflows/update-gcp-auth-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-gh-version.yml b/.github/workflows/update-gh-version.yml
index f23828d63496..af340fb54dd0 100644
--- a/.github/workflows/update-gh-version.yml
+++ b/.github/workflows/update-gh-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-go-github-version.yml b/.github/workflows/update-go-github-version.yml
index 9d2dc6af1cc0..778f5ecefaad 100644
--- a/.github/workflows/update-go-github-version.yml
+++ b/.github/workflows/update-go-github-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-golang-version.yml b/.github/workflows/update-golang-version.yml
index 5c7fbe836595..acf3222d4826 100644
--- a/.github/workflows/update-golang-version.yml
+++ b/.github/workflows/update-golang-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 9 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-golint-version.yml b/.github/workflows/update-golint-version.yml
index 21a34c582ed7..984fe13a55fb 100644
--- a/.github/workflows/update-golint-version.yml
+++ b/.github/workflows/update-golint-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-gopogh-version.yml b/.github/workflows/update-gopogh-version.yml
index e883f0d0fe3d..7faceb839b0a 100644
--- a/.github/workflows/update-gopogh-version.yml
+++ b/.github/workflows/update-gopogh-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 9 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-gotestsum-version.yml b/.github/workflows/update-gotestsum-version.yml
index 2101025082a5..d707ed20b810 100644
--- a/.github/workflows/update-gotestsum-version.yml
+++ b/.github/workflows/update-gotestsum-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-hugo-version.yml b/.github/workflows/update-hugo-version.yml
index 3af4e4aa037c..7f2052aefc80 100644
--- a/.github/workflows/update-hugo-version.yml
+++ b/.github/workflows/update-hugo-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-ingress-version.yml b/.github/workflows/update-ingress-version.yml
index 4bc7c35985d0..9249fb80ca49 100644
--- a/.github/workflows/update-ingress-version.yml
+++ b/.github/workflows/update-ingress-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-inspektor-gadget-version.yml b/.github/workflows/update-inspektor-gadget-version.yml
index 760e6b4bcc0f..cb911555daab 100644
--- a/.github/workflows/update-inspektor-gadget-version.yml
+++ b/.github/workflows/update-inspektor-gadget-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-istio-operator.yml b/.github/workflows/update-istio-operator.yml
index d84471019c79..6e30da501e89 100644
--- a/.github/workflows/update-istio-operator.yml
+++ b/.github/workflows/update-istio-operator.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-k8s-versions.yml b/.github/workflows/update-k8s-versions.yml
index 2682548a9f0f..f4c79aae8d03 100644
--- a/.github/workflows/update-k8s-versions.yml
+++ b/.github/workflows/update-k8s-versions.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 8 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-kindnetd-version.yml b/.github/workflows/update-kindnetd-version.yml
index 2fe09cfdd6dd..e98e2446bed9 100644
--- a/.github/workflows/update-kindnetd-version.yml
+++ b/.github/workflows/update-kindnetd-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 jobs:
diff --git a/.github/workflows/update-kubeadm-constants.yml b/.github/workflows/update-kubeadm-constants.yml
index 41a4cab34d97..cbf59ae89686 100644
--- a/.github/workflows/update-kubeadm-constants.yml
+++ b/.github/workflows/update-kubeadm-constants.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 6 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-kubernetes-versions-list.yml b/.github/workflows/update-kubernetes-versions-list.yml
index d35473935ae1..7eaddcd636f9 100644
--- a/.github/workflows/update-kubernetes-versions-list.yml
+++ b/.github/workflows/update-kubernetes-versions-list.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 6 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-metrics-server-version.yml b/.github/workflows/update-metrics-server-version.yml
index 3a2eaa3b362d..306e73a19dae 100644
--- a/.github/workflows/update-metrics-server-version.yml
+++ b/.github/workflows/update-metrics-server-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-nerdctl-version.yml b/.github/workflows/update-nerdctl-version.yml
index a0861800588b..fdd1ead100a5 100644
--- a/.github/workflows/update-nerdctl-version.yml
+++ b/.github/workflows/update-nerdctl-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-registry-version.yml b/.github/workflows/update-registry-version.yml
index 2d17f3750c8c..f0b75c88b975 100644
--- a/.github/workflows/update-registry-version.yml
+++ b/.github/workflows/update-registry-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-runc-version.yml b/.github/workflows/update-runc-version.yml
index 4a980420c3c3..1b10a09e4d43 100644
--- a/.github/workflows/update-runc-version.yml
+++ b/.github/workflows/update-runc-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 2"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/update-ubuntu-version.yml b/.github/workflows/update-ubuntu-version.yml
index e41bf08a832a..4ded993f4612 100644
--- a/.github/workflows/update-ubuntu-version.yml
+++ b/.github/workflows/update-ubuntu-version.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 10 * * 1"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/.github/workflows/yearly-leaderboard.yml b/.github/workflows/yearly-leaderboard.yml
index 9e4f96e20243..b71252f9abd5 100644
--- a/.github/workflows/yearly-leaderboard.yml
+++ b/.github/workflows/yearly-leaderboard.yml
@@ -6,7 +6,7 @@ on:
     - cron: "0 0 2 * *"
 env:
   GOPROXY: https://proxy.golang.org
-  GO_VERSION: '1.21.2'
+  GO_VERSION: '1.21.3'
 permissions:
   contents: read
 
diff --git a/Makefile b/Makefile
index eab600c3b175..5f5d745ff358 100644
--- a/Makefile
+++ b/Makefile
@@ -34,7 +34,7 @@ RPM_REVISION ?= 0
 
 # used by hack/jenkins/release_build_and_upload.sh and KVM_BUILD_IMAGE, see also BUILD_IMAGE below
 # update this only by running `make update-golang-version`
-GO_VERSION ?= 1.21.2
+GO_VERSION ?= 1.21.3
 # update this only by running `make update-golang-version`
 GO_K8S_VERSION_PREFIX ?= v1.29.0
 
diff --git a/deploy/addons/auto-pause/Dockerfile b/deploy/addons/auto-pause/Dockerfile
index 043b04ba5f1b..9b742916a19f 100644
--- a/deploy/addons/auto-pause/Dockerfile
+++ b/deploy/addons/auto-pause/Dockerfile
@@ -1,2 +1,2 @@
-FROM golang:1.21.2
+FROM golang:1.21.3
 ADD auto-pause-hook /auto-pause-hook
diff --git a/deploy/iso/minikube-iso/go.hash b/deploy/iso/minikube-iso/go.hash
index 2a4627c33cea..b5c904abf736 100644
--- a/deploy/iso/minikube-iso/go.hash
+++ b/deploy/iso/minikube-iso/go.hash
@@ -20,3 +20,4 @@ sha256  62ee5bc6fb55b8bae8f705e0cb8df86d6453626b4ecf93279e2867092e0b7f70  go1.20
 sha256  2c5ee9c9ec1e733b0dbbc2bdfed3f62306e51d8172bf38f4f4e542b27520f597  go1.20.7.src.tar.gz
 sha256  bfa36bf75e9a1e9cbbdb9abcf9d1707e479bd3a07880a8ae3564caee5711cb99  go1.21.1.src.tar.gz
 sha256  45e59de173baec39481854490d665b726cec3e5b159f6b4172e5ec7780b2c201  go1.21.2.src.tar.gz
+sha256  186f2b6f8c8b704e696821b09ab2041a5c1ee13dcbc3156a13adcf75931ee488  go1.21.3.src.tar.gz
diff --git a/deploy/kicbase/Dockerfile b/deploy/kicbase/Dockerfile
index 01c7759a344b..5993cefaf7b8 100644
--- a/deploy/kicbase/Dockerfile
+++ b/deploy/kicbase/Dockerfile
@@ -21,7 +21,7 @@
 # this ARG needs to be global to use it in `FROM` & is updated for new versions of ubuntu:jammy-*
 ARG UBUNTU_JAMMY_IMAGE="ubuntu:jammy-20230916"
 # multi-stage docker build so we can build auto-pause for arm64
-FROM golang:1.21.2 as auto-pause
+FROM golang:1.21.3 as auto-pause
 WORKDIR /src
 # auto-pause depends on core minikube code so we need to pass the whole source code as the context
 # copy in the minimal amount of source code possible
diff --git a/hack/jenkins/installers/check_install_golang.ps1 b/hack/jenkins/installers/check_install_golang.ps1
index c8d0f69293fd..23c35551fed8 100644
--- a/hack/jenkins/installers/check_install_golang.ps1
+++ b/hack/jenkins/installers/check_install_golang.ps1
@@ -31,7 +31,7 @@ AddToPathIfMissing -pathToAdd "C:\Program Files\Go\bin" -scope "Machine"
 AddToPathIfMissing -pathToAdd "$HOME\go\bin" -scope "User"
 
 # Download Go
-$GoVersion = "1.21.2"
+$GoVersion = "1.21.3"
 $CurrentGo = go version
 if ((!$?) -or ($CurrentGo -NotLike "*$GoVersion*")) {
     (New-Object Net.WebClient).DownloadFile("https://go.dev/dl/go$GoVersion.windows-amd64.zip", "$env:TEMP\golang.zip")
diff --git a/hack/jenkins/installers/check_install_golang.sh b/hack/jenkins/installers/check_install_golang.sh
index 4f1845843814..0e6ee0ae08cf 100755
--- a/hack/jenkins/installers/check_install_golang.sh
+++ b/hack/jenkins/installers/check_install_golang.sh
@@ -22,7 +22,7 @@ if (($# < 1)); then
   exit 1
 fi
 
-VERSION_TO_INSTALL=1.21.2
+VERSION_TO_INSTALL=1.21.3
 INSTALL_PATH=${1}
 
 function current_arch() {