diff --git a/.github/workflows/bpf-unit-tests.yml b/.github/workflows/bpf-unit-tests.yml
index 5eb10d31763..883fd87fd8c 100644
--- a/.github/workflows/bpf-unit-tests.yml
+++ b/.github/workflows/bpf-unit-tests.yml
@@ -24,7 +24,7 @@ jobs:
       uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.23.5'
+        go-version: '1.23.6'
 
     - name: Install LLVM
       run: |
diff --git a/.github/workflows/build-clang-image.yaml b/.github/workflows/build-clang-image.yaml
index 59d583c1ced..b7ffdc935f5 100644
--- a/.github/workflows/build-clang-image.yaml
+++ b/.github/workflows/build-clang-image.yaml
@@ -121,7 +121,7 @@ jobs:
         uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.23.5'
+          go-version: '1.23.6'
 
       - name: Install Bom
         shell: bash
diff --git a/.github/workflows/build-images-ci.yml b/.github/workflows/build-images-ci.yml
index 8f79f9d9f73..45312d872d6 100644
--- a/.github/workflows/build-images-ci.yml
+++ b/.github/workflows/build-images-ci.yml
@@ -70,7 +70,7 @@ jobs:
         uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.23.5'
+          go-version: '1.23.6'
 
       # Warning: this must run before checking out the untrusted code
       - name: Get version
diff --git a/.github/workflows/build-images-releases.yml b/.github/workflows/build-images-releases.yml
index 5d14a5c9aae..3ad4db2f9b6 100644
--- a/.github/workflows/build-images-releases.yml
+++ b/.github/workflows/build-images-releases.yml
@@ -91,7 +91,7 @@ jobs:
         uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.23.5'
+          go-version: '1.23.6'
 
       - name: Install Bom
         if: ${{ startsWith(steps.tag.outputs.tag, 'v') }}
diff --git a/.github/workflows/build-rthooks-images-releases.yml b/.github/workflows/build-rthooks-images-releases.yml
index 5121c2fbbbe..980ecb407ab 100644
--- a/.github/workflows/build-rthooks-images-releases.yml
+++ b/.github/workflows/build-rthooks-images-releases.yml
@@ -81,7 +81,7 @@ jobs:
         uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.23.5'
+          go-version: '1.23.6'
 
       - name: Install Bom
         if: ${{ startsWith(steps.tag.outputs.tag, 'v') }}
diff --git a/.github/workflows/generated-files.yaml b/.github/workflows/generated-files.yaml
index 99eb4dcc44d..6f1cfcc73cd 100644
--- a/.github/workflows/generated-files.yaml
+++ b/.github/workflows/generated-files.yaml
@@ -19,7 +19,7 @@ jobs:
         uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.23.5'
+          go-version: '1.23.6'
       - name: Go version
         run: go version
       - name: Validate that generated files are up to date.
diff --git a/.github/workflows/gotests.yml b/.github/workflows/gotests.yml
index 17e1019536b..0c64a3e0b30 100644
--- a/.github/workflows/gotests.yml
+++ b/.github/workflows/gotests.yml
@@ -26,7 +26,7 @@ jobs:
       uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.23.5'
+        go-version: '1.23.6'
 
     - name: Install dependencies
       run: |
diff --git a/.github/workflows/lint-codeql.yml b/.github/workflows/lint-codeql.yml
index 015c1368c39..a286a806c07 100644
--- a/.github/workflows/lint-codeql.yml
+++ b/.github/workflows/lint-codeql.yml
@@ -58,7 +58,7 @@ jobs:
       uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.23.5'
+        go-version: '1.23.6'
     - name: Initialize CodeQL
       uses: github/codeql-action/init@8214744c546c1e5c8f03dde8fab3a7353211988d # v3.26.7
       with:
diff --git a/.github/workflows/podinfo-test.yaml b/.github/workflows/podinfo-test.yaml
index 137a10f90dd..870887cd29a 100644
--- a/.github/workflows/podinfo-test.yaml
+++ b/.github/workflows/podinfo-test.yaml
@@ -39,7 +39,7 @@ jobs:
       uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.23.5'
+        go-version: '1.23.6'
 
     - name: Install Kind and create cluster
       uses: helm/kind-action@0025e74a8c7512023d06dc019c617aa3cf561fde # v1.10.0
diff --git a/.github/workflows/run-e2e-tests.yaml b/.github/workflows/run-e2e-tests.yaml
index 8e8baa4f3a1..0c80219c19a 100644
--- a/.github/workflows/run-e2e-tests.yaml
+++ b/.github/workflows/run-e2e-tests.yaml
@@ -87,7 +87,7 @@ jobs:
       uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.23.5'
+        go-version: '1.23.6'
 
     - name: Install kubectl, kind and cilium CLI
       uses: alexellis/arkade-get@master
diff --git a/.github/workflows/static-checks.yaml b/.github/workflows/static-checks.yaml
index 5ee0bb774ff..643e9aa2350 100644
--- a/.github/workflows/static-checks.yaml
+++ b/.github/workflows/static-checks.yaml
@@ -40,7 +40,7 @@ jobs:
         uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.23.5'
+          go-version: '1.23.6'
           # using golangci-lint cache instead
           cache: false
 
@@ -61,7 +61,7 @@ jobs:
         uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.23.5'
+          go-version: '1.23.6'
 
       - name: Check gofmt formatting
         run: |
@@ -91,7 +91,7 @@ jobs:
         uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.23.5'
+          go-version: '1.23.6'
 
       - name: Check module vendoring
         run: |
diff --git a/.github/workflows/tetragon-rthook-pr.yaml b/.github/workflows/tetragon-rthook-pr.yaml
index 8a237851d18..8bf49717234 100644
--- a/.github/workflows/tetragon-rthook-pr.yaml
+++ b/.github/workflows/tetragon-rthook-pr.yaml
@@ -27,7 +27,7 @@ jobs:
       uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.23.5'
+        go-version: '1.23.6'
 
     - name: Build
       env:
diff --git a/.github/workflows/vmtests.yml b/.github/workflows/vmtests.yml
index 749f357ca64..2390a214330 100644
--- a/.github/workflows/vmtests.yml
+++ b/.github/workflows/vmtests.yml
@@ -27,7 +27,7 @@ jobs:
       uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.23.5'
+        go-version: '1.23.6'
 
     - name: Install build dependencies
       run: |
diff --git a/Dockerfile b/Dockerfile
index 9673ae369e0..1132952df5c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -18,14 +18,14 @@ ARG TARGETARCH
 RUN make tetragon-bpf LOCAL_CLANG=1 TARGET_ARCH=$TARGETARCH
 
 # Second builder (cross-)compile tetragon and tetra
-FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.23.5@sha256:8c10f21bec412f08f73aa7b97ca5ac5f28a39d8a88030ad8a339fd0a781d72b4 AS tetragon-builder
+FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.23.6@sha256:77a21b3e354c03e9f66b13bc39f4f0db8085c70f8414406af66b29c6d6c4dd85 AS tetragon-builder
 WORKDIR /go/src/github.com/cilium/tetragon
 ARG TETRAGON_VERSION TARGETARCH
 COPY . .
 RUN make VERSION=$TETRAGON_VERSION TARGET_ARCH=$TARGETARCH tetragon tetra tetragon-oci-hook tetragon-oci-hook-setup
 
 # Third builder (cross-)compile a stripped gops
-FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.23.5-alpine@sha256:47d337594bd9e667d35514b241569f95fb6d95727c24b19468813d596d5ae596 AS gops
+FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.23.6-alpine@sha256:2c49857f2295e89b23b28386e57e018a86620a8fede5003900f2d138ba9c4037 AS gops
 ARG TARGETARCH
 RUN apk add --no-cache git \
 # renovate: datasource=github-releases depName=google/gops
diff --git a/Dockerfile.dev b/Dockerfile.dev
index f49cdecabb2..c938751db7a 100644
--- a/Dockerfile.dev
+++ b/Dockerfile.dev
@@ -9,7 +9,7 @@ FROM quay.io/cilium/cilium-bpftool@sha256:1832b32d118e7006ea2ce530b14ae5b28acd55
 COPY . ./
 
 
-FROM docker.io/library/golang:1.23.5@sha256:8c10f21bec412f08f73aa7b97ca5ac5f28a39d8a88030ad8a339fd0a781d72b4
+FROM docker.io/library/golang:1.23.6@sha256:77a21b3e354c03e9f66b13bc39f4f0db8085c70f8414406af66b29c6d6c4dd85
 RUN apt-get update -y &&    \
     apt-get upgrade -y &&   \
     apt-get install -y      \
diff --git a/Dockerfile.operator b/Dockerfile.operator
index 092a2561d17..72fdbf05f54 100644
--- a/Dockerfile.operator
+++ b/Dockerfile.operator
@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 ARG BASE_IMAGE=scratch
-ARG GOLANG_IMAGE=docker.io/library/golang:1.23.5@sha256:8c10f21bec412f08f73aa7b97ca5ac5f28a39d8a88030ad8a339fd0a781d72b4
+ARG GOLANG_IMAGE=docker.io/library/golang:1.23.6@sha256:77a21b3e354c03e9f66b13bc39f4f0db8085c70f8414406af66b29c6d6c4dd85
 ARG ALPINE_IMAGE=docker.io/library/alpine:3.21.2@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099
 
 # BUILDPLATFORM is an automatic platform ARG enabled by Docker BuildKit.
diff --git a/Dockerfile.rthooks b/Dockerfile.rthooks
index 9d99196fb4e..aca2390af11 100644
--- a/Dockerfile.rthooks
+++ b/Dockerfile.rthooks
@@ -1,6 +1,6 @@
 # SPDX-License-Identifier: Apache-2.0
 
-ARG GOLANG_IMAGE=docker.io/library/golang:1.23.5@sha256:8c10f21bec412f08f73aa7b97ca5ac5f28a39d8a88030ad8a339fd0a781d72b4
+ARG GOLANG_IMAGE=docker.io/library/golang:1.23.6@sha256:77a21b3e354c03e9f66b13bc39f4f0db8085c70f8414406af66b29c6d6c4dd85
 ARG BASE_IMAGE=docker.io/library/alpine:3.21.2@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099
 
 # BUILDPLATFORM is an automatic platform ARG enabled by Docker BuildKit.
diff --git a/Dockerfile.test b/Dockerfile.test
index 58cf0b1afdb..c1d3aa1f185 100644
--- a/Dockerfile.test
+++ b/Dockerfile.test
@@ -11,7 +11,7 @@ RUN apt-get install -y linux-libc-dev
 COPY . ./
 RUN make tetragon-bpf && pwd
 
-FROM docker.io/library/golang:1.23.5@sha256:8c10f21bec412f08f73aa7b97ca5ac5f28a39d8a88030ad8a339fd0a781d72b4
+FROM docker.io/library/golang:1.23.6@sha256:77a21b3e354c03e9f66b13bc39f4f0db8085c70f8414406af66b29c6d6c4dd85
 RUN apt-get update
 RUN apt-get install -y linux-libc-dev rpm2cpio cpio git flex bison autoconf libelf-dev bc netcat-traditional
 WORKDIR /go/src/github.com/cilium/tetragon
diff --git a/Makefile.cli b/Makefile.cli
index 5bbd12a56ee..c9efdb618cf 100644
--- a/Makefile.cli
+++ b/Makefile.cli
@@ -3,7 +3,7 @@
 
 CLI_GO_BUILD = CGO_ENABLED=0 $(GO) build
 # renovate: datasource=docker
-GO_IMAGE = docker.io/library/golang:1.23.5-alpine@sha256:47d337594bd9e667d35514b241569f95fb6d95727c24b19468813d596d5ae596
+GO_IMAGE = docker.io/library/golang:1.23.6-alpine@sha256:2c49857f2295e89b23b28386e57e018a86620a8fede5003900f2d138ba9c4037
 TARGET=tetra
 
 RELEASE_UID ?= $(shell id -u)
diff --git a/pkg/k8s/Makefile b/pkg/k8s/Makefile
index 43716033e0b..007ff2f91a2 100644
--- a/pkg/k8s/Makefile
+++ b/pkg/k8s/Makefile
@@ -1,5 +1,5 @@
 # renovate: datasource=docker
-BUILDER_IMAGE=docker.io/library/golang:1.23.5@sha256:8c10f21bec412f08f73aa7b97ca5ac5f28a39d8a88030ad8a339fd0a781d72b4
+BUILDER_IMAGE=docker.io/library/golang:1.23.6@sha256:77a21b3e354c03e9f66b13bc39f4f0db8085c70f8414406af66b29c6d6c4dd85
 GO ?= go
 
 all: generate