diff --git a/cloudbuild.yaml b/cloudbuild.yaml
index b952b021819c3..4e95e5e7c5f65 100644
--- a/cloudbuild.yaml
+++ b/cloudbuild.yaml
@@ -4,8 +4,8 @@ options:
   substitution_option: ALLOW_LOOSE
   machineType: 'N1_HIGHCPU_8'
 steps:
-# Push the image
-- name: 'docker.io/library/golang:1.22.6-bookworm'
+# Push the images
+- name: 'docker.io/library/golang:1.22.7-bookworm'
   id: images
   entrypoint: make
   env:
@@ -21,7 +21,7 @@ steps:
   - dns-controller-push
   - kube-apiserver-healthcheck-push
 # Push the artifacts
-- name: 'docker.io/library/golang:1.22.6-bookworm'
+- name: 'docker.io/library/golang:1.22.7-bookworm'
   id: artifacts
   entrypoint: make
   env:
@@ -36,7 +36,7 @@ steps:
   args:
   - gcs-upload-and-tag
 # Build cloudbuild artifacts (for attestation)
-- name: 'docker.io/library/golang:1.22.6-bookworm'
+- name: 'docker.io/library/golang:1.22.7-bookworm'
   id: cloudbuild-artifacts
   entrypoint: make
   env:
diff --git a/go.mod b/go.mod
index cbd41df35ef17..b67e895573074 100644
--- a/go.mod
+++ b/go.mod
@@ -1,7 +1,7 @@
 module k8s.io/kops
 
 // This should be kept in sync with cloudbuild.yaml and the other go.mod files
-go 1.22.6
+go 1.22.7
 
 require (
 	cloud.google.com/go/compute/metadata v0.3.0
diff --git a/hack/go.mod b/hack/go.mod
index b385c0be64ede..1c9f81fe9cb34 100644
--- a/hack/go.mod
+++ b/hack/go.mod
@@ -1,6 +1,6 @@
 module k8s.io/kops/hack
 
-go 1.22.6
+go 1.22.7
 
 require (
 	github.com/client9/misspell v0.3.4
diff --git a/tests/e2e/go.mod b/tests/e2e/go.mod
index 8144d85669351..52c40531511c5 100644
--- a/tests/e2e/go.mod
+++ b/tests/e2e/go.mod
@@ -1,6 +1,6 @@
 module k8s.io/kops/tests/e2e
 
-go 1.22.6
+go 1.22.7
 
 replace k8s.io/kops => ../../.
 
diff --git a/tools/otel/traceserver/go.mod b/tools/otel/traceserver/go.mod
index 116be37be1aa2..6b3403a4af147 100644
--- a/tools/otel/traceserver/go.mod
+++ b/tools/otel/traceserver/go.mod
@@ -1,6 +1,6 @@
 module k8s.io/kops/tools/otel/traceserver
 
-go 1.22.5
+go 1.22.7
 
 require (
 	go.opentelemetry.io/proto/otlp v1.3.1