diff --git a/buildchain/buildchain/versions.py b/buildchain/buildchain/versions.py
index 7e2f0345d6..619b8e8cea 100644
--- a/buildchain/buildchain/versions.py
+++ b/buildchain/buildchain/versions.py
@@ -18,7 +18,7 @@
 
 # Project-wide versions {{{
 
-CALICO_VERSION: str = "3.17.0"
+CALICO_VERSION: str = "3.18.3"
 K8S_VERSION: str = "1.21.0"
 SALT_VERSION: str = "3002.6"
 CONTAINERD_VERSION: str = "1.4.3"
@@ -97,12 +97,12 @@ def _version_prefix(version: str, prefix: str = "v") -> str:
     Image(
         name="calico-node",
         version=_version_prefix(CALICO_VERSION),
-        digest="sha256:92227666988edccd1222d463173489fd656c5a37b8dedab0dadfbc22a471893a",
+        digest="sha256:db6bdfbdd503823c50911d4307664e88d005b357718031c447a709bb6d2a515b",
     ),
     Image(
         name="calico-kube-controllers",
         version=_version_prefix(CALICO_VERSION),
-        digest="sha256:78a6e7648e22b2c87fcc06db610d753e49c6f9b3cf622ab23fdc3a63c1563fc8",
+        digest="sha256:89c8b726b0c9fb5e75b828240e83cda8fcadeaea6c85bcd676fc75f84de21b53",
     ),
     Image(
         name="configmap-reload",