diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index ad86f202ec2..217028c75fc 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -57,7 +57,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           cache: false
-          go-version: 1.23.2
+          go-version: 1.23.3
       - name: Set common go env vars
         run: |-
           go env -w GOTOOLCHAIN=local
diff --git a/internal/ci/repo/repo.cue b/internal/ci/repo/repo.cue
index 9fe6661bfcc..09787bcb599 100644
--- a/internal/ci/repo/repo.cue
+++ b/internal/ci/repo/repo.cue
@@ -42,7 +42,7 @@ matrixGo: ["1.22.x", latestGo]
 // Use a specific latest version for release builds.
 // Note that we don't want ".x" for the sake of reproducibility,
 // so we instead pin a specific Go release.
-pinnedReleaseGo: "1.23.2"
+pinnedReleaseGo: "1.23.3"
 
 goreleaserVersion: "v2.3.2"