diff --git a/build/build-image/cross/VERSION b/build/build-image/cross/VERSION
index 413df5dfd9c..adb177d74e2 100644
--- a/build/build-image/cross/VERSION
+++ b/build/build-image/cross/VERSION
@@ -1 +1 @@
-v1.30.0-go1.22-bullseye.0
+v1.30.0-go1.22.0-bullseye.0
diff --git a/build/common.sh b/build/common.sh
index ff211f3af4e..c9c3f724f4c 100755
--- a/build/common.sh
+++ b/build/common.sh
@@ -97,7 +97,7 @@ readonly KUBE_CONTAINER_RSYNC_PORT=8730
 
 # These are the default versions (image tags) for their respective base images.
 readonly __default_distroless_iptables_version=v0.5.1
-readonly __default_go_runner_version=v2.3.1-go1.22-bookworm.0
+readonly __default_go_runner_version=v2.3.1-go1.22.0-bookworm.0
 readonly __default_setcap_version=bookworm-v1.0.1
 
 # These are the base images for the Docker-wrapped binaries.
diff --git a/build/dependencies.yaml b/build/dependencies.yaml
index 115964647c7..e88ecc1c48d 100644
--- a/build/dependencies.yaml
+++ b/build/dependencies.yaml
@@ -118,7 +118,7 @@ dependencies:
 
   # Golang
   - name: "golang: upstream version"
-    version: 1.22
+    version: 1.22.0
     refPaths:
     - path: .go-version
     - path: build/build-image/cross/VERSION
@@ -140,7 +140,7 @@ dependencies:
       match: minimum_go_version=go([0-9]+\.[0-9]+)
 
   - name: "registry.k8s.io/kube-cross: dependents"
-    version: v1.30.0-go1.22-bullseye.0
+    version: v1.30.0-go1.22.0-bullseye.0
     refPaths:
     - path: build/build-image/cross/VERSION
 
@@ -186,7 +186,7 @@ dependencies:
       match: configs\[DistrolessIptables\] = Config{list\.BuildImageRegistry, "distroless-iptables", "v([0-9]+)\.([0-9]+)\.([0-9]+)"}
 
   - name: "registry.k8s.io/go-runner: dependents"
-    version: v2.3.1-go1.22-bookworm.0
+    version: v2.3.1-go1.22.0-bookworm.0
     refPaths:
     - path: build/common.sh
       match: __default_go_runner_version=