diff --git a/.github/workflows/go.yaml b/.github/workflows/go.yaml
index ceb8b86198..ba166afcb7 100644
--- a/.github/workflows/go.yaml
+++ b/.github/workflows/go.yaml
@@ -22,7 +22,7 @@ jobs:
       uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: 1.21.3
+        go-version: 1.21.4
 
     - name: Run static checks
       uses: golangci/golangci-lint-action@3a919529898de77ec3da873e3063ca4b10e7f5cc # v3.7.0
diff --git a/.github/workflows/kind.yaml b/.github/workflows/kind.yaml
index 90f8e4c6d9..4c51d19ea7 100644
--- a/.github/workflows/kind.yaml
+++ b/.github/workflows/kind.yaml
@@ -46,7 +46,7 @@ jobs:
         uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: 1.21.3
+          go-version: 1.21.4
 
       - name: Set up Go for root
         run: |
@@ -242,7 +242,7 @@ jobs:
         uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: 1.21.3
+          go-version: 1.21.4
 
       - name: Set up Go for root
         run: |
diff --git a/.github/workflows/multicluster.yaml b/.github/workflows/multicluster.yaml
index 33c54b4b00..ceff54780a 100644
--- a/.github/workflows/multicluster.yaml
+++ b/.github/workflows/multicluster.yaml
@@ -85,7 +85,7 @@ jobs:
         uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: 1.21.3
+          go-version: 1.21.4
 
       - name: Set up job variables
         id: vars
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index e4e498273d..a1644f65b9 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -19,7 +19,7 @@ jobs:
         uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: 1.21.3
+          go-version: 1.21.4
 
       - name: Generate the artifacts
         run: make release
diff --git a/Dockerfile b/Dockerfile
index 72a40eae6a..629500573b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -3,7 +3,7 @@
 # Copyright Authors of Cilium
 # SPDX-License-Identifier: Apache-2.0
 
-FROM docker.io/library/golang:1.21.3-alpine3.18@sha256:96a8a701943e7eabd81ebd0963540ad660e29c3b2dc7fb9d7e06af34409e9ba6 as builder
+FROM docker.io/library/golang:1.21.4-alpine3.18@sha256:110b07af87238fbdc5f1df52b00927cf58ce3de358eeeb1854f10a8b5e5e1411 as builder
 WORKDIR /go/src/github.com/cilium/cilium-cli
 RUN apk add --no-cache git make ca-certificates
 COPY . .
diff --git a/go.mod b/go.mod
index 5678abe4d6..2b83987ee3 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/cilium/cilium-cli
 
-go 1.21.3
+go 1.21.4
 
 // Replace directives from github.com/cilium/cilium. Keep in sync when updating Cilium!
 replace (