diff --git a/.tool-versions b/.tool-versions
index 83d3f70dc..9264d4630 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -1 +1 @@
-golang 1.21.4
+golang 1.21.8
diff --git a/Dockerfile b/Dockerfile
index 69e61dfaf..7af4307d6 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -13,7 +13,7 @@ RUN make yarn
 COPY ./ui/ ./ui/
 RUN make build-ui
 
-FROM golang:1.21.5-bookworm@sha256:1415bb0b25d3bffc0a44dcf9851c20a9f8bbe558095221d931f2e4a4cc3596eb as build
+FROM golang:1.21.8-bookworm@sha256:ac14cc827536ef1a124cd2f7a03178c3335c1db8ad3807e7fdd57f74096abfa0 as build
 WORKDIR /go/src/github.com/pomerium/pomerium
 
 RUN apt-get update \
diff --git a/Dockerfile.debug b/Dockerfile.debug
index 9d14dd593..e0f4546a5 100644
--- a/Dockerfile.debug
+++ b/Dockerfile.debug
@@ -13,7 +13,7 @@ RUN make yarn
 COPY ./ui/ ./ui/
 RUN make build-ui
 
-FROM golang:1.21.5-bookworm@sha256:1415bb0b25d3bffc0a44dcf9851c20a9f8bbe558095221d931f2e4a4cc3596eb as build
+FROM golang:1.21.8-bookworm@sha256:ac14cc827536ef1a124cd2f7a03178c3335c1db8ad3807e7fdd57f74096abfa0 as build
 WORKDIR /go/src/github.com/pomerium/pomerium
 
 RUN apt-get update \