diff --git a/.woodpecker/build-package.yml b/.woodpecker/build-package.yml
index 5272e44..8f9c72a 100644
--- a/.woodpecker/build-package.yml
+++ b/.woodpecker/build-package.yml
@@ -7,7 +7,7 @@ when:
 
 steps:
   - name: build
-    image: docker.io/techknowlogick/xgo:go-1.23.2
+    image: docker.io/techknowlogick/xgo:go-1.23.3
     commands:
       - ln -s $(pwd) /source
       - make release
diff --git a/.woodpecker/test.yml b/.woodpecker/test.yml
index fb7eb38..81ee122 100644
--- a/.woodpecker/test.yml
+++ b/.woodpecker/test.yml
@@ -7,11 +7,11 @@ when:
 
 steps:
   - name: lint
-    image: docker.io/library/golang:1.23.2
+    image: docker.io/library/golang:1.23.3
     commands:
       - make lint
 
   - name: test
-    image: docker.io/library/golang:1.23.2
+    image: docker.io/library/golang:1.23.3
     commands:
       - make test
diff --git a/Containerfile.multiarch b/Containerfile.multiarch
index 5d00613..813d5a4 100644
--- a/Containerfile.multiarch
+++ b/Containerfile.multiarch
@@ -1,4 +1,4 @@
-FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.23.2@sha256:ad5c126b5cf501a8caef751a243bb717ec204ab1aa56dc41dc11be089fafcb4f AS build
+FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.23.3@sha256:d56c3e08fe5b27729ee3834854ae8f7015af48fd651cd25d1e3bcf3c19830174 AS build
 
 ARG TARGETOS
 ARG TARGETARCH
diff --git a/Makefile b/Makefile
index 7f30db9..f0429c6 100644
--- a/Makefile
+++ b/Makefile
@@ -3,7 +3,7 @@ GOFUMPT_PACKAGE_VERSION := v0.7.0
 # renovate: datasource=github-releases depName=golangci/golangci-lint
 GOLANGCI_LINT_PACKAGE_VERSION := v1.61.0
 # renovate: datasource=docker depName=docker.io/techknowlogick/xgo
-XGO_PACKAGE_VERSION := go-1.23.2
+XGO_PACKAGE_VERSION := go-1.23.3
 
 EXECUTABLE := wp-opentofu
 
diff --git a/go.mod b/go.mod
index 7d3d831..d8d735c 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/thegeeklab/wp-opentofu
 
-go 1.23.2
+go 1.23.3
 
 require (
 	github.com/Masterminds/semver/v3 v3.3.0