diff --git a/build/build-image/cross/VERSION b/build/build-image/cross/VERSION
index 65c5f5f1eaf..b0ae55d054e 100644
--- a/build/build-image/cross/VERSION
+++ b/build/build-image/cross/VERSION
@@ -1 +1 @@
-v1.16.4-2
+v1.16.5-1
diff --git a/build/common.sh b/build/common.sh
index 4502fe0a880..f2d9f2b4cde 100755
--- a/build/common.sh
+++ b/build/common.sh
@@ -87,7 +87,7 @@ readonly KUBE_CONTAINER_RSYNC_PORT=8730
 
 # These are the default versions (image tags) for their respective base images.
 readonly __default_debian_iptables_version=buster-v1.6.2
-readonly __default_go_runner_version=v2.3.1-go1.16.4-buster.0
+readonly __default_go_runner_version=v2.3.1-go1.16.5-buster.0
 readonly __default_setcap_version=buster-v2.0.1
 
 # These are the base images for the Docker-wrapped binaries.
diff --git a/build/dependencies.yaml b/build/dependencies.yaml
index 795f8507c8f..8914c89b9b5 100644
--- a/build/dependencies.yaml
+++ b/build/dependencies.yaml
@@ -101,7 +101,7 @@ dependencies:
 
   # Golang
   - name: "golang: upstream version"
-    version: 1.16.4
+    version: 1.16.5
     refPaths:
     - path: build/build-image/cross/VERSION
     - path: cluster/addons/fluentd-elasticsearch/es-image/Dockerfile
@@ -124,7 +124,7 @@ dependencies:
       match: minimum_go_version=go([0-9]+\.[0-9]+)
 
   - name: "k8s.gcr.io/kube-cross: dependents"
-    version: v1.16.4-2
+    version: v1.16.5-1
     refPaths:
     - path: build/build-image/cross/VERSION
 
@@ -152,7 +152,7 @@ dependencies:
       match: configs\[DebianIptables\] = Config{list\.BuildImageRegistry, "debian-iptables", "[a-zA-Z]+\-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)"}
 
   - name: "k8s.gcr.io/go-runner: dependents"
-    version: v2.3.1-go1.16.4-buster.0
+    version: v2.3.1-go1.16.5-buster.0
     refPaths:
     - path: build/common.sh
       match: __default_go_runner_version=
diff --git a/cluster/addons/fluentd-elasticsearch/es-image/Dockerfile b/cluster/addons/fluentd-elasticsearch/es-image/Dockerfile
index d409e7c209a..81ca131fc09 100644
--- a/cluster/addons/fluentd-elasticsearch/es-image/Dockerfile
+++ b/cluster/addons/fluentd-elasticsearch/es-image/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.16.4 AS builder
+FROM golang:1.16.5 AS builder
 COPY elasticsearch_logging_discovery.go go.mod go.sum /
 RUN CGO_ENABLED=0 GOOS=linux GO111MODULE=on go build -a -ldflags "-w" -o /elasticsearch_logging_discovery /elasticsearch_logging_discovery.go
 
diff --git a/staging/publishing/rules.yaml b/staging/publishing/rules.yaml
index aa3a304877a..3da8a3ccc14 100644
--- a/staging/publishing/rules.yaml
+++ b/staging/publishing/rules.yaml
@@ -7,7 +7,7 @@ recursive-delete-patterns:
 - BUILD.bazel
 - "*/BUILD.bazel"
 - Gopkg.toml
-default-go-version: 1.16.4
+default-go-version: 1.16.5
 rules:
 - destination: code-generator
   branches:
diff --git a/test/images/Makefile b/test/images/Makefile
index b73ae0eb689..54862dba9d1 100644
--- a/test/images/Makefile
+++ b/test/images/Makefile
@@ -16,7 +16,7 @@ REGISTRY ?= gcr.io/kubernetes-e2e-test-images
 GOARM ?= 7
 DOCKER_CERT_BASE_PATH ?=
 QEMUVERSION=v5.1.0-2
-GOLANG_VERSION=1.16.4
+GOLANG_VERSION=1.16.5
 export
 
 ifndef WHAT