diff --git a/dockerfiles/cd/builders/ng-monitoring/Dockerfile b/dockerfiles/cd/builders/ng-monitoring/Dockerfile
index a8db1772..93f254b0 100644
--- a/dockerfiles/cd/builders/ng-monitoring/Dockerfile
+++ b/dockerfiles/cd/builders/ng-monitoring/Dockerfile
@@ -19,7 +19,7 @@ RUN yum update --nogpgcheck -y && \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.21.6
+ARG GOLANG_VERSION=1.21.7
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH /usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/skaffold.yaml b/dockerfiles/cd/builders/skaffold.yaml
index 1005a4fe..1ff30903 100644
--- a/dockerfiles/cd/builders/skaffold.yaml
+++ b/dockerfiles/cd/builders/skaffold.yaml
@@ -88,7 +88,7 @@ profiles:
         path: /build/artifacts/0/kaniko/buildArgs
         value: &value-go1-21
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.21.6
+          GOLANG_VERSION: 1.21.7
       - op: add
         path: /build/artifacts/1/kaniko/buildArgs
         value: *value-go1-21
diff --git a/dockerfiles/cd/builders/tidb-dashboard/Dockerfile b/dockerfiles/cd/builders/tidb-dashboard/Dockerfile
index 0e5d326e..65e2536c 100644
--- a/dockerfiles/cd/builders/tidb-dashboard/Dockerfile
+++ b/dockerfiles/cd/builders/tidb-dashboard/Dockerfile
@@ -17,7 +17,7 @@ RUN yum -y update && \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.21.6
+ARG GOLANG_VERSION=1.21.7
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH /usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/tidb/Dockerfile b/dockerfiles/cd/builders/tidb/Dockerfile
index d5cf8469..38e844f3 100644
--- a/dockerfiles/cd/builders/tidb/Dockerfile
+++ b/dockerfiles/cd/builders/tidb/Dockerfile
@@ -18,7 +18,7 @@ RUN yum update --nogpgcheck -y && \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.21.6
+ARG GOLANG_VERSION=1.21.7
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH /usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/tiflow/Dockerfile b/dockerfiles/cd/builders/tiflow/Dockerfile
index afcc2f87..6927bc41 100644
--- a/dockerfiles/cd/builders/tiflow/Dockerfile
+++ b/dockerfiles/cd/builders/tiflow/Dockerfile
@@ -17,7 +17,7 @@ RUN yum update --nogpgcheck -y && \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.21.6
+ARG GOLANG_VERSION=1.21.7
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH /usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/utils/release/Dockerfile b/dockerfiles/cd/utils/release/Dockerfile
index f50695e4..c82a5402 100644
--- a/dockerfiles/cd/utils/release/Dockerfile
+++ b/dockerfiles/cd/utils/release/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.21.6-alpine3.18 as gomplate_builder
+FROM golang:1.21.7-alpine3.18 as gomplate_builder
 
 RUN wget https://github.com/hairyhenderson/gomplate/archive/refs/heads/main.zip -O - | unzip - && cd gomplate-main && go build -o /usr/local/bin/gomplate ./cmd/gomplate
 
diff --git a/dockerfiles/ci/base/Dockerfile b/dockerfiles/ci/base/Dockerfile
index 71c15834..5220429e 100644
--- a/dockerfiles/ci/base/Dockerfile
+++ b/dockerfiles/ci/base/Dockerfile
@@ -1,6 +1,6 @@
 # Base image
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.21.6
+ARG GOLANG_VERSION=1.21.7
 FROM golang:${GOLANG_VERSION}
 
 LABEL go-version "${GOLANG_VERSION}"
diff --git a/dockerfiles/ci/release-build-base/Dockerfile b/dockerfiles/ci/release-build-base/Dockerfile
index 01db6205..4871a2e5 100644
--- a/dockerfiles/ci/release-build-base/Dockerfile
+++ b/dockerfiles/ci/release-build-base/Dockerfile
@@ -48,7 +48,7 @@ RUN yum update --nogpgcheck -y && \
 
 ##### install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.21.6
+ARG GOLANG_VERSION=1.21.7
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH /usr/local/go/bin/:$PATH
diff --git a/dockerfiles/ci/skaffold.yaml b/dockerfiles/ci/skaffold.yaml
index 602245d2..9f2c72fd 100644
--- a/dockerfiles/ci/skaffold.yaml
+++ b/dockerfiles/ci/skaffold.yaml
@@ -126,7 +126,7 @@ profiles:
         path: /build/artifacts/0/kaniko/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.21.6
+          GOLANG_VERSION: 1.21.7
   - name: go-1.20
     patches:
       - op: replace