diff --git a/.github/variables/go-versions.env b/.github/variables/go-versions.env
index 8a6cc5a0..fa6247dd 100644
--- a/.github/variables/go-versions.env
+++ b/.github/variables/go-versions.env
@@ -1,2 +1,2 @@
-latest=1.23.4
-penultimate=1.22.10
+latest=1.23.6
+penultimate=1.22.12
diff --git a/Dockerfile b/Dockerfile
index 38b22729..fd3739ed 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@
 
 # This is a standalone Dockerfile that does not depend on goreleaser building the binary
 # It is NOT the version that is pushed to dockerhub
-FROM golang:1.23.4-alpine3.21 as builder
+FROM golang:1.23.6-alpine3.21 as builder
 # See "Runtime platform versions" in CONTRIBUTING.md
 
 RUN apk --no-cache add \