diff --git a/.go-version b/.go-version
index d905a6d1d61..5bb76b575e1 100644
--- a/.go-version
+++ b/.go-version
@@ -1 +1 @@
-1.25.1
+1.25.3
diff --git a/build/dependencies.yaml b/build/dependencies.yaml
index f351dd19d08..739323418d0 100644
--- a/build/dependencies.yaml
+++ b/build/dependencies.yaml
@@ -117,7 +117,7 @@ dependencies:
   # Golang
   # TODO: this should really be eliminated and controlled by .go-version
   - name: "golang: upstream version"
-    version: 1.25.1
+    version: 1.25.3
     refPaths:
     - path: .go-version
     - path: staging/publishing/rules.yaml
diff --git a/staging/publishing/rules.yaml b/staging/publishing/rules.yaml
index c9f4fbcf1c8..454bfd6dee8 100644
--- a/staging/publishing/rules.yaml
+++ b/staging/publishing/rules.yaml
@@ -2473,4 +2473,4 @@ rules:
       - staging/src/k8s.io/externaljwt
 recursive-delete-patterns:
 - '*/.gitattributes'
-default-go-version: 1.25.1
+default-go-version: 1.25.3