diff --git a/build/common.sh b/build/common.sh
index e84f4eaafd0..12ba308ab22 100755
--- a/build/common.sh
+++ b/build/common.sh
@@ -98,7 +98,7 @@ readonly KUBE_CONTAINER_RSYNC_PORT=8730
 # These are the default versions (image tags) for their respective base images.
 readonly __default_distroless_iptables_version=v0.2.5
 readonly __default_go_runner_version=v2.3.1-go1.20.5-bullseye.0
-readonly __default_setcap_version=bullseye-v1.4.2
+readonly __default_setcap_version=bookworm-v1.0.0
 
 # These are the base images for the Docker-wrapped binaries.
 readonly KUBE_GORUNNER_IMAGE="${KUBE_GORUNNER_IMAGE:-$KUBE_BASE_IMAGE_REGISTRY/go-runner:$__default_go_runner_version}"
diff --git a/build/dependencies.yaml b/build/dependencies.yaml
index c676183fb44..298e3de6378 100644
--- a/build/dependencies.yaml
+++ b/build/dependencies.yaml
@@ -233,8 +233,8 @@ dependencies:
     - path: test/utils/image/manifest.go
       match: configs\[Pause\] = Config{list\.GcRegistry, "pause", "\d+\.\d+(.\d+)?"}
 
-  - name: "registry.k8s.io/setcap: dependents"
-    version: bullseye-v1.4.2
+  - name: "registry.k8s.io/build-image/setcap: dependents"
+    version: bookworm-v1.0.0
     refPaths:
     - path: build/common.sh
       match: __default_setcap_version=