diff --git a/SPECS/runc/runc.signatures.json b/SPECS/runc/runc.signatures.json
index 18a8b03544d..b42d28af450 100644
--- a/SPECS/runc/runc.signatures.json
+++ b/SPECS/runc/runc.signatures.json
@@ -1,5 +1,5 @@
 {
- "Signatures": {
-  "runc-1.2.2.tar.gz": "0eabc936d481d123be92c429588f9d1de7cafd36b37a8a5085b1412e758796a1"
- }
+  "Signatures": {
+    "runc-1.3.0.tar.gz": "3262492ce42bea0919ee1a2d000b6f303fd14877295bc38d094876b55fdd448b"
+  }
 }
diff --git a/SPECS/runc/runc.spec b/SPECS/runc/runc.spec
index 8523a32c790..c4aff5846ae 100644
--- a/SPECS/runc/runc.spec
+++ b/SPECS/runc/runc.spec
@@ -2,7 +2,7 @@
 Summary:        CLI tool for spawning and running containers per OCI spec.
 Name:           runc
 # update "commit_hash" above when upgrading version
-Version:        1.2.2
+Version:        1.3.0
 Release:        1%{?dist}
 License:        ASL 2.0
 Vendor:         Microsoft Corporation
@@ -43,6 +43,9 @@ make install-man DESTDIR=%{buildroot} PREFIX=%{_prefix}
 %{_mandir}/*
 
 %changelog
+* Thu Oct 23 2025 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.3.0-1
+- Auto-upgrade to 1.3.0 - none
+
 * Mon Nov 25 2024 Nan Liu <liunan@microsoft.com> - 1.2.2-1
 - Bump version to 1.2.2
 - Remove the golang version constraint
diff --git a/cgmanifest.json b/cgmanifest.json
index b73a37e4482..e5922354776 100644
--- a/cgmanifest.json
+++ b/cgmanifest.json
@@ -27454,8 +27454,8 @@
         "type": "other",
         "other": {
           "name": "runc",
-          "version": "1.2.2",
-          "downloadUrl": "https://github.com/opencontainers/runc/archive/v1.2.2.tar.gz"
+          "version": "1.3.0",
+          "downloadUrl": "https://github.com/opencontainers/runc/archive/v1.3.0.tar.gz"
         }
       }
     },