diff --git a/cloudbuild.yaml b/cloudbuild.yaml
index 310f84351a..60b9e0cf13 100644
--- a/cloudbuild.yaml
+++ b/cloudbuild.yaml
@@ -5,7 +5,7 @@ options:
   machineType: "E2_HIGHCPU_32"
 steps:
   # Push the images
-  - name: "mirror.gcr.io/library/golang:1.24.1-bookworm"
+  - name: "mirror.gcr.io/library/golang:1.24.3-bookworm"
     id: images
     entrypoint: make
     env:
@@ -21,7 +21,7 @@ steps:
       - dns-controller-push
       - kube-apiserver-healthcheck-push
   # Push the artifacts
-  - name: "mirror.gcr.io/library/golang:1.24.1-bookworm"
+  - name: "mirror.gcr.io/library/golang:1.24.3-bookworm"
     id: artifacts
     entrypoint: make
     env:
@@ -36,7 +36,7 @@ steps:
     args:
       - gcs-upload-and-tag
   # Build cloudbuild artifacts (for attestation)
-  - name: "mirror.gcr.io/library/golang:1.24.1-bookworm"
+  - name: "mirror.gcr.io/library/golang:1.24.3-bookworm"
     id: cloudbuild-artifacts
     entrypoint: make
     env:
diff --git a/go.mod b/go.mod
index 5be7752ec0..cb385e8351 100644
--- a/go.mod
+++ b/go.mod
@@ -1,7 +1,7 @@
 module k8s.io/kops
 
 // This should be kept in sync with cloudbuild.yaml and the other go.mod files
-go 1.24.1
+go 1.24.3
 
 godebug default=go1.24
 
diff --git a/hack/go.mod b/hack/go.mod
index dfc78a6544..c0b9f53527 100644
--- a/hack/go.mod
+++ b/hack/go.mod
@@ -1,6 +1,6 @@
 module k8s.io/kops/hack
 
-go 1.24.1
+go 1.24.3
 
 require (
 	github.com/client9/misspell v0.3.4
diff --git a/tests/e2e/go.mod b/tests/e2e/go.mod
index 91bc93d200..74e25181b7 100644
--- a/tests/e2e/go.mod
+++ b/tests/e2e/go.mod
@@ -1,6 +1,6 @@
 module k8s.io/kops/tests/e2e
 
-go 1.24.1
+go 1.24.3
 
 replace k8s.io/kops => ../../.
 
diff --git a/tools/otel/traceserver/go.mod b/tools/otel/traceserver/go.mod
index 01cab0b291..2c676597f9 100644
--- a/tools/otel/traceserver/go.mod
+++ b/tools/otel/traceserver/go.mod
@@ -1,6 +1,6 @@
 module k8s.io/kops/tools/otel/traceserver
 
-go 1.24.1
+go 1.24.3
 
 require (
 	go.opentelemetry.io/proto/otlp v1.5.0