diff --git a/.github/actions/setup-go/action.yaml b/.github/actions/setup-go/action.yaml
index d4c67cb7dd..819bc27e0e 100644
--- a/.github/actions/setup-go/action.yaml
+++ b/.github/actions/setup-go/action.yaml
@@ -4,7 +4,7 @@ description: |
 inputs:
   version:
     description: "The Go version to use."
-    default: "1.21.5"
+    default: "1.21.9"
 runs:
   using: "composite"
   steps:
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 084d4c5983..c3541a2493 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -228,7 +228,7 @@ jobs:
         with:
           # This doesn't need caching. It's super fast anyways!
           cache: false
-          go-version: 1.21.5
+          go-version: 1.21.9
 
       - name: Install shfmt
         run: go install mvdan.cc/sh/v3/cmd/shfmt@v3.7.0
diff --git a/dogfood/Dockerfile b/dogfood/Dockerfile
index c2899a48c0..4daaa0a636 100644
--- a/dogfood/Dockerfile
+++ b/dogfood/Dockerfile
@@ -8,7 +8,7 @@ FROM ubuntu:jammy AS go
 
 RUN apt-get update && apt-get install --yes curl gcc
 # Install Go manually, so that we can control the version
-ARG GO_VERSION=1.21.5
+ARG GO_VERSION=1.21.9
 RUN mkdir --parents /usr/local/go
 
 # Boring Go is needed to build FIPS-compliant binaries.