diff --git a/.github/workflows/bpf-unit-tests.yml b/.github/workflows/bpf-unit-tests.yml
index 4194ac437b4..00c34724d25 100644
--- a/.github/workflows/bpf-unit-tests.yml
+++ b/.github/workflows/bpf-unit-tests.yml
@@ -23,7 +23,7 @@ jobs:
       uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.22.4'
+        go-version: '1.22.5'
 
     - name: Install LLVM
       run: |
diff --git a/.github/workflows/build-clang-image.yaml b/.github/workflows/build-clang-image.yaml
index b14928740fb..49874e2c703 100644
--- a/.github/workflows/build-clang-image.yaml
+++ b/.github/workflows/build-clang-image.yaml
@@ -121,7 +121,7 @@ jobs:
         uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.22.4'
+          go-version: '1.22.5'
 
       - name: Install Bom
         shell: bash
diff --git a/.github/workflows/build-images-ci.yml b/.github/workflows/build-images-ci.yml
index 482e1b39f77..271f4ff7af1 100644
--- a/.github/workflows/build-images-ci.yml
+++ b/.github/workflows/build-images-ci.yml
@@ -94,7 +94,7 @@ jobs:
         uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.22.4'
+          go-version: '1.22.5'
 
       - name: Install Bom
         shell: bash
diff --git a/.github/workflows/build-images-releases.yml b/.github/workflows/build-images-releases.yml
index 373f5c7c142..ce5c87889b1 100644
--- a/.github/workflows/build-images-releases.yml
+++ b/.github/workflows/build-images-releases.yml
@@ -91,7 +91,7 @@ jobs:
         uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.22.4'
+          go-version: '1.22.5'
 
       - name: Install Bom
         if: ${{ startsWith(steps.tag.outputs.tag, 'v') }}
diff --git a/.github/workflows/generated-files.yaml b/.github/workflows/generated-files.yaml
index 6c2a867a43d..c3ee6d4b038 100644
--- a/.github/workflows/generated-files.yaml
+++ b/.github/workflows/generated-files.yaml
@@ -19,7 +19,7 @@ jobs:
         uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.22.4'
+          go-version: '1.22.5'
       - name: Go version
         run: go version
       - name: Validate that generated files are up to date.
diff --git a/.github/workflows/gotests.yml b/.github/workflows/gotests.yml
index b01e8b98700..e94ba169aa4 100644
--- a/.github/workflows/gotests.yml
+++ b/.github/workflows/gotests.yml
@@ -26,7 +26,7 @@ jobs:
       uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.22.4'
+        go-version: '1.22.5'
 
     - name: Install dependencies x86
       run: |
diff --git a/.github/workflows/lint-codeql.yml b/.github/workflows/lint-codeql.yml
index 0f8b2bf20ae..20bc38cb6f7 100644
--- a/.github/workflows/lint-codeql.yml
+++ b/.github/workflows/lint-codeql.yml
@@ -58,7 +58,7 @@ jobs:
       uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.22.4'
+        go-version: '1.22.5'
     - name: Initialize CodeQL
       uses: github/codeql-action/init@e675ced7a7522a761fc9c8eb26682c8b27c42b2b # v3.24.1
       with:
diff --git a/.github/workflows/podinfo-test.yaml b/.github/workflows/podinfo-test.yaml
index 62be0cf10ec..c2be8bb2f0c 100644
--- a/.github/workflows/podinfo-test.yaml
+++ b/.github/workflows/podinfo-test.yaml
@@ -39,7 +39,7 @@ jobs:
       uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.22.4'
+        go-version: '1.22.5'
 
     - name: Install Kind and create cluster
       uses: helm/kind-action@99576bfa6ddf9a8e612d83b513da5a75875caced # v1.9.0
diff --git a/.github/workflows/run-e2e-tests.yaml b/.github/workflows/run-e2e-tests.yaml
index e7129b067ea..901b34dc30c 100644
--- a/.github/workflows/run-e2e-tests.yaml
+++ b/.github/workflows/run-e2e-tests.yaml
@@ -57,7 +57,7 @@ jobs:
       uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.22.4'
+        go-version: '1.22.5'
 
     - name: Set Up Job Variables
       id: vars
diff --git a/.github/workflows/static-checks.yaml b/.github/workflows/static-checks.yaml
index c3ede5465f9..aa0d41527d7 100644
--- a/.github/workflows/static-checks.yaml
+++ b/.github/workflows/static-checks.yaml
@@ -40,7 +40,7 @@ jobs:
         uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.22.4'
+          go-version: '1.22.5'
           # using golangci-lint cache instead
           cache: false
 
@@ -61,7 +61,7 @@ jobs:
         uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.22.4'
+          go-version: '1.22.5'
 
       - name: Check gofmt formatting
         run: |
@@ -91,7 +91,7 @@ jobs:
         uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.22.4'
+          go-version: '1.22.5'
 
       - name: Check module vendoring
         run: |
diff --git a/.github/workflows/vmtests.yml b/.github/workflows/vmtests.yml
index 34f4cf813aa..6d9a40b5e29 100644
--- a/.github/workflows/vmtests.yml
+++ b/.github/workflows/vmtests.yml
@@ -27,7 +27,7 @@ jobs:
       uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.22.4'
+        go-version: '1.22.5'
 
     - name: Install build dependencies
       run: |
diff --git a/Dockerfile b/Dockerfile
index c177923c6d8..06e77f6928d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -18,14 +18,14 @@ ARG TARGETARCH
 RUN make tetragon-bpf LOCAL_CLANG=1 TARGET_ARCH=$TARGETARCH
 
 # Second builder (cross-)compile tetragon and tetra
-FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.22.4@sha256:c8736b8dbf2b12c98bb0eeed91eef58ecef52b8c2bd49b8044531e8d8d8d58e8 as tetragon-builder
+FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.22.5@sha256:829eff99a4b2abffe68f6a3847337bf6455d69d17e49ec1a97dac78834754bd6 as tetragon-builder
 WORKDIR /go/src/github.com/cilium/tetragon
 ARG TETRAGON_VERSION TARGETARCH
 COPY . .
 RUN make VERSION=$TETRAGON_VERSION TARGET_ARCH=$TARGETARCH tetragon tetra tetragon-oci-hook tetragon-oci-hook-setup
 
 # Third builder (cross-)compile a stripped gops
-FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.22.4-alpine@sha256:ace6cc3fe58d0c7b12303c57afe6d6724851152df55e08057b43990b927ad5e8 as gops
+FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.22.5-alpine@sha256:8c9183f715b0b4eca05b8b3dbf59766aaedb41ec07477b132ee2891ac0110a07 as gops
 ARG TARGETARCH
 RUN apk add --no-cache git \
 # renovate: datasource=github-releases depName=google/gops
diff --git a/Dockerfile.dev b/Dockerfile.dev
index bf56b924adf..e1be82d5cdc 100644
--- a/Dockerfile.dev
+++ b/Dockerfile.dev
@@ -9,7 +9,7 @@ FROM quay.io/cilium/cilium-bpftool@sha256:1832b32d118e7006ea2ce530b14ae5b28acd55
 COPY . ./
 
 
-FROM docker.io/library/golang:1.22.4@sha256:c8736b8dbf2b12c98bb0eeed91eef58ecef52b8c2bd49b8044531e8d8d8d58e8
+FROM docker.io/library/golang:1.22.5@sha256:829eff99a4b2abffe68f6a3847337bf6455d69d17e49ec1a97dac78834754bd6
 RUN apt-get update -y &&    \
     apt-get upgrade -y &&   \
     apt-get install -y      \
diff --git a/Dockerfile.operator b/Dockerfile.operator
index 1a2ba006204..d050bf93740 100644
--- a/Dockerfile.operator
+++ b/Dockerfile.operator
@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 ARG BASE_IMAGE=scratch
-ARG GOLANG_IMAGE=docker.io/library/golang:1.22.4@sha256:c8736b8dbf2b12c98bb0eeed91eef58ecef52b8c2bd49b8044531e8d8d8d58e8
+ARG GOLANG_IMAGE=docker.io/library/golang:1.22.5@sha256:829eff99a4b2abffe68f6a3847337bf6455d69d17e49ec1a97dac78834754bd6
 ARG ALPINE_IMAGE=docker.io/library/alpine:3.20.1@sha256:b89d9c93e9ed3597455c90a0b88a8bbb5cb7188438f70953fede212a0c4394e0
 
 # BUILDPLATFORM is an automatic platform ARG enabled by Docker BuildKit.
diff --git a/Dockerfile.test b/Dockerfile.test
index 89490f315b3..57d4aeaefe7 100644
--- a/Dockerfile.test
+++ b/Dockerfile.test
@@ -11,7 +11,7 @@ RUN apt-get install -y linux-libc-dev
 COPY . ./
 RUN make tetragon-bpf && pwd
 
-FROM docker.io/library/golang:1.22.4@sha256:c8736b8dbf2b12c98bb0eeed91eef58ecef52b8c2bd49b8044531e8d8d8d58e8
+FROM docker.io/library/golang:1.22.5@sha256:829eff99a4b2abffe68f6a3847337bf6455d69d17e49ec1a97dac78834754bd6
 RUN apt-get update
 RUN apt-get install -y linux-libc-dev rpm2cpio cpio git flex bison autoconf libelf-dev bc netcat-traditional
 WORKDIR /go/src/github.com/cilium/tetragon
diff --git a/Makefile.cli b/Makefile.cli
index f08f6d5725a..da3c8e351c1 100644
--- a/Makefile.cli
+++ b/Makefile.cli
@@ -3,7 +3,7 @@
 
 CLI_GO_BUILD = CGO_ENABLED=0 $(GO) build
 # renovate: datasource=docker
-GO_IMAGE = docker.io/library/golang:1.22.4-alpine@sha256:ace6cc3fe58d0c7b12303c57afe6d6724851152df55e08057b43990b927ad5e8
+GO_IMAGE = docker.io/library/golang:1.22.5-alpine@sha256:8c9183f715b0b4eca05b8b3dbf59766aaedb41ec07477b132ee2891ac0110a07
 TARGET=tetra
 
 RELEASE_UID ?= $(shell id -u)
diff --git a/pkg/k8s/Makefile b/pkg/k8s/Makefile
index 7bc152f97b3..5154bb1d001 100644
--- a/pkg/k8s/Makefile
+++ b/pkg/k8s/Makefile
@@ -1,5 +1,5 @@
 # renovate: datasource=docker
-BUILDER_IMAGE=docker.io/library/golang:1.22.4@sha256:c8736b8dbf2b12c98bb0eeed91eef58ecef52b8c2bd49b8044531e8d8d8d58e8
+BUILDER_IMAGE=docker.io/library/golang:1.22.5@sha256:829eff99a4b2abffe68f6a3847337bf6455d69d17e49ec1a97dac78834754bd6
 GO ?= go
 
 all: generate