diff --git a/pkg/buildx/Dockerfile b/pkg/buildx/Dockerfile
index 877deba2..4a69f5fe 100644
--- a/pkg/buildx/Dockerfile
+++ b/pkg/buildx/Dockerfile
@@ -29,7 +29,7 @@ ARG PKG_REPO="https://github.com/docker/buildx.git"
 ARG PKG_REF="master"
 
 ARG GO_IMAGE="golang"
-ARG GO_VERSION=1.25.3
+ARG GO_VERSION=1.25.4
 ARG GO_IMAGE_VARIANT="bookworm"
 
 # stage used as named context that mounts hack/scripts
diff --git a/pkg/docker-cli/Dockerfile b/pkg/docker-cli/Dockerfile
index 2394f7ea..1ba94189 100644
--- a/pkg/docker-cli/Dockerfile
+++ b/pkg/docker-cli/Dockerfile
@@ -32,7 +32,7 @@ ARG PKG_REPO="https://github.com/docker/cli.git"
 ARG PKG_REF="master"
 
 ARG GO_IMAGE="golang"
-ARG GO_VERSION=1.25.3
+ARG GO_VERSION=1.25.4
 ARG GO_IMAGE_VARIANT="bookworm"
 
 # stage used as named context that mounts hack/scripts
diff --git a/pkg/docker-engine/Dockerfile b/pkg/docker-engine/Dockerfile
index 1bd667f0..8a026b24 100644
--- a/pkg/docker-engine/Dockerfile
+++ b/pkg/docker-engine/Dockerfile
@@ -32,7 +32,7 @@ ARG PKG_REPO="https://github.com/docker/docker.git"
 ARG PKG_REF="master"
 
 ARG GO_IMAGE="golang"
-ARG GO_VERSION=1.25.3
+ARG GO_VERSION=1.25.4
 ARG GO_IMAGE_VARIANT="bookworm"
 
 # stage used as named context that mounts hack/scripts