diff --git a/.github/workflows/bpf-unit-tests.yml b/.github/workflows/bpf-unit-tests.yml
index 13116818f1..4464f20a14 100644
--- a/.github/workflows/bpf-unit-tests.yml
+++ b/.github/workflows/bpf-unit-tests.yml
@@ -23,7 +23,7 @@ jobs:
       uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.22.7'
+        go-version: '1.23.1'
 
     - name: Install LLVM
       run: |
diff --git a/.github/workflows/build-clang-image.yaml b/.github/workflows/build-clang-image.yaml
index dea9dd6b1b..5d1d73b2eb 100644
--- a/.github/workflows/build-clang-image.yaml
+++ b/.github/workflows/build-clang-image.yaml
@@ -121,7 +121,7 @@ jobs:
         uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.22.7'
+          go-version: '1.23.1'
 
       - name: Install Bom
         shell: bash
diff --git a/.github/workflows/build-images-ci.yml b/.github/workflows/build-images-ci.yml
index fd8c7e3bed..d7d603d77d 100644
--- a/.github/workflows/build-images-ci.yml
+++ b/.github/workflows/build-images-ci.yml
@@ -97,7 +97,7 @@ jobs:
         uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.22.7'
+          go-version: '1.23.1'
 
       - name: Install Bom
         shell: bash
diff --git a/.github/workflows/build-images-releases.yml b/.github/workflows/build-images-releases.yml
index ebf5eafc86..73cf1e6607 100644
--- a/.github/workflows/build-images-releases.yml
+++ b/.github/workflows/build-images-releases.yml
@@ -91,7 +91,7 @@ jobs:
         uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.22.7'
+          go-version: '1.23.1'
 
       - name: Install Bom
         if: ${{ startsWith(steps.tag.outputs.tag, 'v') }}
diff --git a/.github/workflows/build-rthooks-images-releases.yml b/.github/workflows/build-rthooks-images-releases.yml
index 57657c3b1c..2e728c5f3c 100644
--- a/.github/workflows/build-rthooks-images-releases.yml
+++ b/.github/workflows/build-rthooks-images-releases.yml
@@ -81,7 +81,7 @@ jobs:
         uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.22.7'
+          go-version: '1.23.1'
 
       - name: Install Bom
         if: ${{ startsWith(steps.tag.outputs.tag, 'v') }}
diff --git a/.github/workflows/generated-files.yaml b/.github/workflows/generated-files.yaml
index 75ad5d9d32..b844633a64 100644
--- a/.github/workflows/generated-files.yaml
+++ b/.github/workflows/generated-files.yaml
@@ -19,7 +19,7 @@ jobs:
         uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.22.7'
+          go-version: '1.23.1'
       - name: Go version
         run: go version
       - name: Validate that generated files are up to date.
diff --git a/.github/workflows/gotests.yml b/.github/workflows/gotests.yml
index c6a3831fc2..b75179a53b 100644
--- a/.github/workflows/gotests.yml
+++ b/.github/workflows/gotests.yml
@@ -26,7 +26,7 @@ jobs:
       uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.22.7'
+        go-version: '1.23.1'
 
     - name: Install dependencies x86
       run: |
diff --git a/.github/workflows/lint-codeql.yml b/.github/workflows/lint-codeql.yml
index cdf7bd0fb2..8b21406929 100644
--- a/.github/workflows/lint-codeql.yml
+++ b/.github/workflows/lint-codeql.yml
@@ -58,7 +58,7 @@ jobs:
       uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.22.7'
+        go-version: '1.23.1'
     - name: Initialize CodeQL
       uses: github/codeql-action/init@f079b8493333aace61c81488f8bd40919487bd9f # v3.25.7
       with:
diff --git a/.github/workflows/podinfo-test.yaml b/.github/workflows/podinfo-test.yaml
index a41a626b98..a76fa0d570 100644
--- a/.github/workflows/podinfo-test.yaml
+++ b/.github/workflows/podinfo-test.yaml
@@ -39,7 +39,7 @@ jobs:
       uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.22.7'
+        go-version: '1.23.1'
 
     - name: Install Kind and create cluster
       uses: helm/kind-action@0025e74a8c7512023d06dc019c617aa3cf561fde # v1.10.0
diff --git a/.github/workflows/run-e2e-tests.yaml b/.github/workflows/run-e2e-tests.yaml
index 8cdb03834e..daa1e3e7e4 100644
--- a/.github/workflows/run-e2e-tests.yaml
+++ b/.github/workflows/run-e2e-tests.yaml
@@ -87,7 +87,7 @@ jobs:
       uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.22.7'
+        go-version: '1.23.1'
 
     - name: Install kubectl, kind and cilium CLI
       uses: alexellis/arkade-get@master
diff --git a/.github/workflows/static-checks.yaml b/.github/workflows/static-checks.yaml
index 33d1cd22ba..afd01ab723 100644
--- a/.github/workflows/static-checks.yaml
+++ b/.github/workflows/static-checks.yaml
@@ -40,7 +40,7 @@ jobs:
         uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.22.7'
+          go-version: '1.23.1'
           # using golangci-lint cache instead
           cache: false
 
@@ -61,7 +61,7 @@ jobs:
         uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.22.7'
+          go-version: '1.23.1'
 
       - name: Check gofmt formatting
         run: |
@@ -91,7 +91,7 @@ jobs:
         uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.22.7'
+          go-version: '1.23.1'
 
       - name: Check module vendoring
         run: |
diff --git a/.github/workflows/tetragon-rthook-pr.yaml b/.github/workflows/tetragon-rthook-pr.yaml
index 65f06a3452..b18f2a18c3 100644
--- a/.github/workflows/tetragon-rthook-pr.yaml
+++ b/.github/workflows/tetragon-rthook-pr.yaml
@@ -27,7 +27,7 @@ jobs:
       uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.22.7'
+        go-version: '1.23.1'
 
     - name: Build
       env:
diff --git a/.github/workflows/vmtests.yml b/.github/workflows/vmtests.yml
index 35aedc03c9..73f61f7487 100644
--- a/.github/workflows/vmtests.yml
+++ b/.github/workflows/vmtests.yml
@@ -27,7 +27,7 @@ jobs:
       uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.22.7'
+        go-version: '1.23.1'
 
     - name: Install build dependencies
       run: |
diff --git a/Dockerfile b/Dockerfile
index b0161bcd58..da16a7ef6c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -18,14 +18,14 @@ ARG TARGETARCH
 RUN make tetragon-bpf LOCAL_CLANG=1 TARGET_ARCH=$TARGETARCH
 
 # Second builder (cross-)compile tetragon and tetra
-FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.22.7@sha256:192683db8982323952988c7b86c098ee7ecc6cbeb202bf7c113ff9be5358367c AS tetragon-builder
+FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.23.1@sha256:2fe82a3f3e006b4f2a316c6a21f62b66e1330ae211d039bb8d1128e12ed57bf1 AS tetragon-builder
 WORKDIR /go/src/github.com/cilium/tetragon
 ARG TETRAGON_VERSION TARGETARCH
 COPY . .
 RUN make VERSION=$TETRAGON_VERSION TARGET_ARCH=$TARGETARCH tetragon tetra tetragon-oci-hook tetragon-oci-hook-setup
 
 # Third builder (cross-)compile a stripped gops
-FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.22.7-alpine@sha256:f5d8e5b932b14ef0d7c760fb3a98949351aa063a6900130beabb705100077188 AS gops
+FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.23.1-alpine@sha256:ac67716dd016429be8d4c2c53a248d7bcdf06d34127d3dc451bda6aa5a87bc06 AS gops
 ARG TARGETARCH
 RUN apk add --no-cache git \
 # renovate: datasource=github-releases depName=google/gops
diff --git a/Dockerfile.dev b/Dockerfile.dev
index 2e762b31d8..ecdb1b105b 100644
--- a/Dockerfile.dev
+++ b/Dockerfile.dev
@@ -9,7 +9,7 @@ FROM quay.io/cilium/cilium-bpftool@sha256:1832b32d118e7006ea2ce530b14ae5b28acd55
 COPY . ./
 
 
-FROM docker.io/library/golang:1.22.7@sha256:192683db8982323952988c7b86c098ee7ecc6cbeb202bf7c113ff9be5358367c
+FROM docker.io/library/golang:1.23.1@sha256:2fe82a3f3e006b4f2a316c6a21f62b66e1330ae211d039bb8d1128e12ed57bf1
 RUN apt-get update -y &&    \
     apt-get upgrade -y &&   \
     apt-get install -y      \
diff --git a/Dockerfile.operator b/Dockerfile.operator
index 88c26f12fe..89dca7f1f2 100644
--- a/Dockerfile.operator
+++ b/Dockerfile.operator
@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 ARG BASE_IMAGE=scratch
-ARG GOLANG_IMAGE=docker.io/library/golang:1.22.7@sha256:192683db8982323952988c7b86c098ee7ecc6cbeb202bf7c113ff9be5358367c
+ARG GOLANG_IMAGE=docker.io/library/golang:1.23.1@sha256:2fe82a3f3e006b4f2a316c6a21f62b66e1330ae211d039bb8d1128e12ed57bf1
 ARG ALPINE_IMAGE=docker.io/library/alpine:3.20.3@sha256:beefdbd8a1da6d2915566fde36db9db0b524eb737fc57cd1367effd16dc0d06d
 
 # BUILDPLATFORM is an automatic platform ARG enabled by Docker BuildKit.
diff --git a/Dockerfile.rthooks b/Dockerfile.rthooks
index b79b5b18db..011c661f72 100644
--- a/Dockerfile.rthooks
+++ b/Dockerfile.rthooks
@@ -1,6 +1,6 @@
 # SPDX-License-Identifier: Apache-2.0
 
-ARG GOLANG_IMAGE=docker.io/library/golang:1.22.7@sha256:192683db8982323952988c7b86c098ee7ecc6cbeb202bf7c113ff9be5358367c
+ARG GOLANG_IMAGE=docker.io/library/golang:1.23.1@sha256:2fe82a3f3e006b4f2a316c6a21f62b66e1330ae211d039bb8d1128e12ed57bf1
 ARG BASE_IMAGE=docker.io/library/alpine:3.20.3@sha256:beefdbd8a1da6d2915566fde36db9db0b524eb737fc57cd1367effd16dc0d06d
 
 # BUILDPLATFORM is an automatic platform ARG enabled by Docker BuildKit.
diff --git a/Dockerfile.test b/Dockerfile.test
index 83b7ef449e..d40ae3b05f 100644
--- a/Dockerfile.test
+++ b/Dockerfile.test
@@ -11,7 +11,7 @@ RUN apt-get install -y linux-libc-dev
 COPY . ./
 RUN make tetragon-bpf && pwd
 
-FROM docker.io/library/golang:1.22.7@sha256:192683db8982323952988c7b86c098ee7ecc6cbeb202bf7c113ff9be5358367c
+FROM docker.io/library/golang:1.23.1@sha256:2fe82a3f3e006b4f2a316c6a21f62b66e1330ae211d039bb8d1128e12ed57bf1
 RUN apt-get update
 RUN apt-get install -y linux-libc-dev rpm2cpio cpio git flex bison autoconf libelf-dev bc netcat-traditional
 WORKDIR /go/src/github.com/cilium/tetragon
diff --git a/Makefile.cli b/Makefile.cli
index 00c5def099..2df6586651 100644
--- a/Makefile.cli
+++ b/Makefile.cli
@@ -3,7 +3,7 @@
 
 CLI_GO_BUILD = CGO_ENABLED=0 $(GO) build
 # renovate: datasource=docker
-GO_IMAGE = docker.io/library/golang:1.22.7-alpine@sha256:f5d8e5b932b14ef0d7c760fb3a98949351aa063a6900130beabb705100077188
+GO_IMAGE = docker.io/library/golang:1.23.1-alpine@sha256:ac67716dd016429be8d4c2c53a248d7bcdf06d34127d3dc451bda6aa5a87bc06
 TARGET=tetra
 
 RELEASE_UID ?= $(shell id -u)
diff --git a/api/go.mod b/api/go.mod
index 9ceccc27a1..a775279a29 100644
--- a/api/go.mod
+++ b/api/go.mod
@@ -1,9 +1,7 @@
 module github.com/cilium/tetragon/api
 
 // renovate: datasource=golang-version depName=go
-go 1.22.1
-
-toolchain go1.22.3
+go 1.23.1
 
 require (
 	github.com/cilium/tetragon v0.0.0-00010101000000-000000000000
diff --git a/api/vendor/modules.txt b/api/vendor/modules.txt
index 650997bb99..4348b01716 100644
--- a/api/vendor/modules.txt
+++ b/api/vendor/modules.txt
@@ -1,5 +1,5 @@
 # github.com/cilium/tetragon v0.0.0-00010101000000-000000000000 => ../
-## explicit; go 1.22.1
+## explicit; go 1.23.1
 github.com/cilium/tetragon/pkg/matchers/bytesmatcher
 github.com/cilium/tetragon/pkg/matchers/listmatcher
 github.com/cilium/tetragon/pkg/matchers/stringmatcher
diff --git a/contrib/tetragon-rthooks/go.mod b/contrib/tetragon-rthooks/go.mod
index 4b04a457fd..e1d75d3441 100644
--- a/contrib/tetragon-rthooks/go.mod
+++ b/contrib/tetragon-rthooks/go.mod
@@ -1,9 +1,7 @@
 module github.com/cilium/tetragon/contrib/rthooks/tetragon-oci-hook
 
 // renovate: datasource=golang-version depName=go
-go 1.22.1
-
-toolchain go1.22.3
+go 1.23.1
 
 require (
 	github.com/alecthomas/kong v0.9.0
diff --git a/contrib/tetragon-rthooks/vendor/modules.txt b/contrib/tetragon-rthooks/vendor/modules.txt
index 7e6fa6c65c..de97f41e52 100644
--- a/contrib/tetragon-rthooks/vendor/modules.txt
+++ b/contrib/tetragon-rthooks/vendor/modules.txt
@@ -23,7 +23,7 @@ github.com/cilium/ebpf/link
 ## explicit; go 1.13
 github.com/cilium/lumberjack/v2
 # github.com/cilium/tetragon/api v0.0.0-00010101000000-000000000000 => ../../api
-## explicit; go 1.22.1
+## explicit; go 1.23.1
 github.com/cilium/tetragon/api/v1/tetragon
 # github.com/containerd/containerd v1.7.21
 ## explicit; go 1.21
diff --git a/go.mod b/go.mod
index 0c97f01c02..dff53cdf76 100644
--- a/go.mod
+++ b/go.mod
@@ -1,9 +1,7 @@
 module github.com/cilium/tetragon
 
 // renovate: datasource=golang-version depName=go
-go 1.22.1
-
-toolchain go1.22.3
+go 1.23.1
 
 require (
 	github.com/bombsimon/logrusr/v4 v4.1.0
diff --git a/pkg/k8s/Makefile b/pkg/k8s/Makefile
index 9a9665970a..636de1dce6 100644
--- a/pkg/k8s/Makefile
+++ b/pkg/k8s/Makefile
@@ -1,5 +1,5 @@
 # renovate: datasource=docker
-BUILDER_IMAGE=docker.io/library/golang:1.22.7@sha256:192683db8982323952988c7b86c098ee7ecc6cbeb202bf7c113ff9be5358367c
+BUILDER_IMAGE=docker.io/library/golang:1.23.1@sha256:2fe82a3f3e006b4f2a316c6a21f62b66e1330ae211d039bb8d1128e12ed57bf1
 GO ?= go
 
 all: generate
diff --git a/pkg/k8s/go.mod b/pkg/k8s/go.mod
index 32ad6f5f82..2e5d1b3fed 100644
--- a/pkg/k8s/go.mod
+++ b/pkg/k8s/go.mod
@@ -1,7 +1,7 @@
 module github.com/cilium/tetragon/pkg/k8s
 
 // renovate: datasource=golang-version depName=go
-go 1.22.0
+go 1.23.1
 
 require (
 	github.com/blang/semver/v4 v4.0.0
diff --git a/vendor/modules.txt b/vendor/modules.txt
index 7ec868987e..dee4b559ba 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -227,13 +227,13 @@ github.com/cilium/proxy/go/envoy/type/tracing/v3
 github.com/cilium/proxy/go/envoy/type/v3
 github.com/cilium/proxy/pkg/policy/api/kafka
 # github.com/cilium/tetragon/api v0.0.0-00010101000000-000000000000 => ./api
-## explicit; go 1.22.1
+## explicit; go 1.23.1
 github.com/cilium/tetragon/api/v1/tetragon
 github.com/cilium/tetragon/api/v1/tetragon/codegen/eventchecker
 github.com/cilium/tetragon/api/v1/tetragon/codegen/eventchecker/yaml
 github.com/cilium/tetragon/api/v1/tetragon/codegen/helpers
 # github.com/cilium/tetragon/pkg/k8s v0.0.0-00010101000000-000000000000 => ./pkg/k8s
-## explicit; go 1.22.0
+## explicit; go 1.23.1
 github.com/cilium/tetragon/pkg/k8s/apis/cilium.io
 github.com/cilium/tetragon/pkg/k8s/apis/cilium.io/client
 github.com/cilium/tetragon/pkg/k8s/apis/cilium.io/v1alpha1