diff --git a/.prow.yaml b/.prow.yaml
index 8c753b0..4e8017c 100644
--- a/.prow.yaml
+++ b/.prow.yaml
@@ -21,7 +21,7 @@ presubmits:
       preset-goproxy: "true"
     spec:
       containers:
-        - image: ghcr.io/kcp-dev/infra/build:1.23.4-3
+        - image: ghcr.io/kcp-dev/infra/build:1.23.5-1
           command:
             - hack/ci/verify.sh
           resources:
@@ -37,7 +37,7 @@ presubmits:
       preset-goproxy: "true"
     spec:
       containers:
-        - image: ghcr.io/kcp-dev/infra/build:1.23.4-3
+        - image: ghcr.io/kcp-dev/infra/build:1.23.5-1
           command:
             - make
             - lint
@@ -54,7 +54,7 @@ presubmits:
       preset-goproxy: "true"
     spec:
       containers:
-        - image: quay.io/containers/buildah:v1.30.0
+        - image: quay.io/containers/buildah:v1.38.0
           command:
             - hack/ci/build-image.sh
           env:
@@ -76,7 +76,7 @@ presubmits:
       preset-goproxy: "true"
     spec:
       containers:
-        - image: ghcr.io/kcp-dev/infra/build:1.23.4-3
+        - image: ghcr.io/kcp-dev/infra/build:1.23.5-1
           command:
             - make
             - test
diff --git a/Dockerfile b/Dockerfile
index 3f385dc..4cccec4 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM --platform=${BUILDPLATFORM} docker.io/golang:1.23.4 AS builder
+FROM --platform=${BUILDPLATFORM} docker.io/golang:1.23.5 AS builder
 ARG TARGETOS
 ARG TARGETARCH