diff --git a/.woodpecker/build-package.yml b/.woodpecker/build-package.yml
index 114685c..5272e44 100644
--- a/.woodpecker/build-package.yml
+++ b/.woodpecker/build-package.yml
@@ -7,7 +7,7 @@ when:
 
 steps:
   - name: build
-    image: docker.io/techknowlogick/xgo:go-1.23.x
+    image: docker.io/techknowlogick/xgo:go-1.23.2
     commands:
       - ln -s $(pwd) /source
       - make release
diff --git a/.woodpecker/test.yml b/.woodpecker/test.yml
index 9fb9867..fb7eb38 100644
--- a/.woodpecker/test.yml
+++ b/.woodpecker/test.yml
@@ -7,11 +7,11 @@ when:
 
 steps:
   - name: lint
-    image: docker.io/library/golang:1.23
+    image: docker.io/library/golang:1.23.2
     commands:
       - make lint
 
   - name: test
-    image: docker.io/library/golang:1.23
+    image: docker.io/library/golang:1.23.2
     commands:
       - make test
diff --git a/Containerfile.multiarch b/Containerfile.multiarch
index 393b9ea..9b5b4db 100644
--- a/Containerfile.multiarch
+++ b/Containerfile.multiarch
@@ -1,4 +1,4 @@
-FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.23@sha256:ad5c126b5cf501a8caef751a243bb717ec204ab1aa56dc41dc11be089fafcb4f AS build
+FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.23.2@sha256:ad5c126b5cf501a8caef751a243bb717ec204ab1aa56dc41dc11be089fafcb4f AS build
 
 ARG TARGETOS
 ARG TARGETARCH
diff --git a/Makefile b/Makefile
index 76a5deb..89e2839 100644
--- a/Makefile
+++ b/Makefile
@@ -3,7 +3,7 @@ GOFUMPT_PACKAGE_VERSION := v0.7.0
 # renovate: datasource=github-releases depName=golangci/golangci-lint
 GOLANGCI_LINT_PACKAGE_VERSION := v1.61.0
 # renovate: datasource=docker depName=docker.io/techknowlogick/xgo
-XGO_PACKAGE_VERSION := go-1.23.x
+XGO_PACKAGE_VERSION := go-1.23.2
 
 EXECUTABLE := wp-matrix