diff --git a/.builder-image-version.txt b/.builder-image-version.txt
index 6f182425..c442f5e7 100644
--- a/.builder-image-version.txt
+++ b/.builder-image-version.txt
@@ -1 +1 @@
-1.1.21
+1.1.22
diff --git a/.github/workflows/pr-lint.yml b/.github/workflows/pr-lint.yml
index d5c5b726..09ec576c 100644
--- a/.github/workflows/pr-lint.yml
+++ b/.github/workflows/pr-lint.yml
@@ -21,7 +21,7 @@ jobs:
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/sovereigncloudstack/cso-builder:1.1.21
+      image: ghcr.io/sovereigncloudstack/cso-builder:1.1.22
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.github_token }}
diff --git a/.github/workflows/schedule-scan-image.yml b/.github/workflows/schedule-scan-image.yml
index dfe982c1..89345bfb 100644
--- a/.github/workflows/schedule-scan-image.yml
+++ b/.github/workflows/schedule-scan-image.yml
@@ -9,7 +9,7 @@ jobs:
     name: Trivy
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/sovereigncloudstack/cso-builder:1.1.21
+      image: ghcr.io/sovereigncloudstack/cso-builder:1.1.22
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.github_token }}
diff --git a/images/cso/Dockerfile b/images/cso/Dockerfile
index 3938590c..da784cd7 100644
--- a/images/cso/Dockerfile
+++ b/images/cso/Dockerfile
@@ -12,10 +12,10 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM --platform=${BUILDPLATFORM} docker.io/alpine/helm:3.16.2 as helm
+FROM --platform=${BUILDPLATFORM} docker.io/alpine/helm:3.16.3 as helm
 
 # Build the manager binary
-FROM --platform=${BUILDPLATFORM} docker.io/library/golang:1.23.2-bullseye as build
+FROM --platform=${BUILDPLATFORM} docker.io/library/golang:1.23.3-bullseye as build
 ARG TARGETOS TARGETARCH
 
 COPY . /src/cluster-stack-operator