diff --git a/build/common.sh b/build/common.sh
index 1b8049d64ee..28ca64a0fe1 100755
--- a/build/common.sh
+++ b/build/common.sh
@@ -87,7 +87,7 @@ readonly KUBE_CONTAINER_RSYNC_PORT=8730
 
 # These are the default versions (image tags) for their respective base images.
 readonly __default_debian_iptables_version=buster-v1.5.0
-readonly __default_go_runner_version=buster-v2.3.1
+readonly __default_go_runner_version=v2.3.1-go1.16-buster.0
 
 # These are the base images for the Docker-wrapped binaries.
 readonly KUBE_GORUNNER_IMAGE="${KUBE_GORUNNER_IMAGE:-$KUBE_BASE_IMAGE_REGISTRY/go-runner:$__default_go_runner_version}"
diff --git a/build/dependencies.yaml b/build/dependencies.yaml
index 48cd912d9c6..9fab0fb2e47 100644
--- a/build/dependencies.yaml
+++ b/build/dependencies.yaml
@@ -152,7 +152,7 @@ dependencies:
       match: configs\[DebianIptables\] = Config{buildImageRegistry, "debian-iptables", "[a-zA-Z]+\-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)"}
 
   - name: "k8s.gcr.io/go-runner: dependents"
-    version: buster-v2.3.1
+    version: v2.3.1-go1.16-buster.0
     refPaths:
     - path: build/common.sh
       match: __default_go_runner_version=