diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a99ebf882..69d80885d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,7 +13,7 @@ on:
     paths-ignore: [docs/**, "**.md", "**.mdx", "**.png", "**.jpg"]
 
 env:
-  GO_VERSION: '1.23.6'
+  GO_VERSION: '1.23.8'
 
 jobs:
   detect-noop:
diff --git a/.github/workflows/code-lint.yml b/.github/workflows/code-lint.yml
index 0e415e5fd..d5fc088b2 100644
--- a/.github/workflows/code-lint.yml
+++ b/.github/workflows/code-lint.yml
@@ -14,7 +14,7 @@ on:
 
 env:
   # Common versions
-  GO_VERSION: '1.23.6'
+  GO_VERSION: '1.23.8'
 
 jobs:
 
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
index eeffdabcb..487b1aa28 100644
--- a/.github/workflows/trivy.yml
+++ b/.github/workflows/trivy.yml
@@ -18,7 +18,7 @@ env:
   MEMBER_AGENT_IMAGE_NAME: member-agent
   REFRESH_TOKEN_IMAGE_NAME: refresh-token
 
-  GO_VERSION: '1.23.6'
+  GO_VERSION: '1.23.8'
 
 jobs:
   export-registry:
diff --git a/.github/workflows/upgrade.yml b/.github/workflows/upgrade.yml
index 053184f3f..2059813a0 100644
--- a/.github/workflows/upgrade.yml
+++ b/.github/workflows/upgrade.yml
@@ -20,7 +20,7 @@ on:
     paths-ignore: [docs/**, "**.md", "**.mdx", "**.png", "**.jpg"]
 
 env:
-  GO_VERSION: '1.23.6'
+  GO_VERSION: '1.23.8'
 
 jobs:
   detect-noop:
diff --git a/.golangci.yml b/.golangci.yml
index fb3a7356d..38334621b 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -1,6 +1,6 @@
 run:
   timeout: 15m
-  go: '1.23.6'
+  go: '1.23.8'
 
 linters-settings:
   stylecheck:
diff --git a/docker/hub-agent.Dockerfile b/docker/hub-agent.Dockerfile
index 8b06eef14..61198181f 100644
--- a/docker/hub-agent.Dockerfile
+++ b/docker/hub-agent.Dockerfile
@@ -1,5 +1,5 @@
 # Build the hubagent binary
-FROM mcr.microsoft.com/oss/go/microsoft/golang:1.23.6 AS builder
+FROM mcr.microsoft.com/oss/go/microsoft/golang:1.23.8 AS builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests
diff --git a/docker/member-agent.Dockerfile b/docker/member-agent.Dockerfile
index 5350b4314..f9a95a464 100644
--- a/docker/member-agent.Dockerfile
+++ b/docker/member-agent.Dockerfile
@@ -1,5 +1,5 @@
 # Build the memberagent binary
-FROM mcr.microsoft.com/oss/go/microsoft/golang:1.23.6 AS builder
+FROM mcr.microsoft.com/oss/go/microsoft/golang:1.23.8 AS builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests
diff --git a/docker/refresh-token.Dockerfile b/docker/refresh-token.Dockerfile
index 0505833d2..b19170481 100644
--- a/docker/refresh-token.Dockerfile
+++ b/docker/refresh-token.Dockerfile
@@ -1,5 +1,5 @@
 # Build the hubagent binary
-FROM mcr.microsoft.com/oss/go/microsoft/golang:1.23.6 AS builder
+FROM mcr.microsoft.com/oss/go/microsoft/golang:1.23.8 AS builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests
diff --git a/go.mod b/go.mod
index 0dc3d8b0a..112daf214 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/kubefleet-dev/kubefleet
 
-go 1.23.6
+go 1.23.8
 
 require (
 	github.com/Azure/azure-sdk-for-go/sdk/azcore v1.16.0