diff --git a/.github/variables/go-versions.env b/.github/variables/go-versions.env
index 4391ac27..783cda47 100644
--- a/.github/variables/go-versions.env
+++ b/.github/variables/go-versions.env
@@ -1,2 +1,2 @@
-latest=1.23.2
-penultimate=1.22.8
+latest=1.23.3
+penultimate=1.22.9
diff --git a/Dockerfile b/Dockerfile
index 997bbd10..612dc128 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@
 
 # This is a standalone Dockerfile that does not depend on goreleaser building the binary
 # It is NOT the version that is pushed to dockerhub
-FROM golang:1.23.2-alpine3.20 as builder
+FROM golang:1.23.3-alpine3.20 as builder
 # See "Runtime platform versions" in CONTRIBUTING.md
 
 RUN apk --no-cache add \