diff --git a/cloudbuild.yaml b/cloudbuild.yaml
index 320edddc31630..37bb10eb1f415 100644
--- a/cloudbuild.yaml
+++ b/cloudbuild.yaml
@@ -4,8 +4,8 @@ options:
   substitution_option: ALLOW_LOOSE
   machineType: 'N1_HIGHCPU_32'
 steps:
-# Push the image
-- name: 'docker.io/library/golang:1.22.6-bookworm'
+# Push the images
+- name: 'docker.io/library/golang:1.22.7-bookworm'
   id: images
   entrypoint: make
   env:
@@ -21,7 +21,7 @@ steps:
   - dns-controller-push
   - kube-apiserver-healthcheck-push
 # Push the artifacts
-- name: 'docker.io/library/golang:1.22.6-bookworm'
+- name: 'docker.io/library/golang:1.22.7-bookworm'
   id: artifacts
   entrypoint: make
   env:
@@ -36,7 +36,7 @@ steps:
   args:
   - gcs-upload-and-tag
 # Build cloudbuild artifacts (for attestation)
-- name: 'docker.io/library/golang:1.22.6-bookworm'
+- name: 'docker.io/library/golang:1.22.7-bookworm'
   id: cloudbuild-artifacts
   entrypoint: make
   env:
diff --git a/go.mod b/go.mod
index d095beec61e6d..f24ab13e77f0c 100644
--- a/go.mod
+++ b/go.mod
@@ -1,7 +1,7 @@
 module k8s.io/kops
 
 // This should be kept in sync with cloudbuild.yaml and the other go.mod files
-go 1.22.6
+go 1.22.7
 
 require (
 	cloud.google.com/go/compute/metadata v0.5.0
diff --git a/hack/go.mod b/hack/go.mod
index 9daaf7b7e2fc6..7fd1d43148171 100644
--- a/hack/go.mod
+++ b/hack/go.mod
@@ -1,6 +1,6 @@
 module k8s.io/kops/hack
 
-go 1.22.6
+go 1.22.7
 
 require (
 	github.com/client9/misspell v0.3.4
diff --git a/tests/e2e/go.mod b/tests/e2e/go.mod
index aae75648ce71f..72416cf73a16c 100644
--- a/tests/e2e/go.mod
+++ b/tests/e2e/go.mod
@@ -1,6 +1,6 @@
 module k8s.io/kops/tests/e2e
 
-go 1.22.6
+go 1.22.7
 
 replace k8s.io/kops => ../../.
 
diff --git a/tools/otel/traceserver/go.mod b/tools/otel/traceserver/go.mod
index 991653fd9dbe1..38f170ce6fbfc 100644
--- a/tools/otel/traceserver/go.mod
+++ b/tools/otel/traceserver/go.mod
@@ -1,6 +1,6 @@
 module k8s.io/kops/tools/otel/traceserver
 
-go 1.22.5
+go 1.22.7
 
 require (
 	go.opentelemetry.io/proto/otlp v1.3.1