diff --git a/apps/gcp/tekton-dev/configs/tasks/github-set-status.yaml b/apps/gcp/tekton-dev/configs/tasks/github-set-status.yaml
index f9a141ac1..d8aa588ac 100644
--- a/apps/gcp/tekton-dev/configs/tasks/github-set-status.yaml
+++ b/apps/gcp/tekton-dev/configs/tasks/github-set-status.yaml
@@ -100,7 +100,7 @@ spec:
         - name: githubtoken
           mountPath: /etc/github-set-status
 
-      image: python:3.12
+      image: python:3.13
       script: |
         #!/usr/bin/env python3
 
diff --git a/apps/prod/tekton/configs/tasks/github-set-status.yaml b/apps/prod/tekton/configs/tasks/github-set-status.yaml
index f9a141ac1..d8aa588ac 100644
--- a/apps/prod/tekton/configs/tasks/github-set-status.yaml
+++ b/apps/prod/tekton/configs/tasks/github-set-status.yaml
@@ -100,7 +100,7 @@ spec:
         - name: githubtoken
           mountPath: /etc/github-set-status
 
-      image: python:3.12
+      image: python:3.13
       script: |
         #!/usr/bin/env python3
 
diff --git a/apps/prod/tekton/configs/tasks/pingcap-upload-enterprise-plugins.yaml b/apps/prod/tekton/configs/tasks/pingcap-upload-enterprise-plugins.yaml
index 2d9020fc8..92d7f6244 100644
--- a/apps/prod/tekton/configs/tasks/pingcap-upload-enterprise-plugins.yaml
+++ b/apps/prod/tekton/configs/tasks/pingcap-upload-enterprise-plugins.yaml
@@ -25,7 +25,7 @@ spec:
   steps:
     - name: upload-offline-tarballs
       workingDir: /workspace
-      image: python:3.12.7
+      image: python:3.13.0
       envFrom:
         - secretRef:
             name: $(params.env-secret-name)
diff --git a/apps/prod/tekton/configs/tasks/pingcap-upload-offline-package.yaml b/apps/prod/tekton/configs/tasks/pingcap-upload-offline-package.yaml
index 31cfaab72..bf157d7d8 100644
--- a/apps/prod/tekton/configs/tasks/pingcap-upload-offline-package.yaml
+++ b/apps/prod/tekton/configs/tasks/pingcap-upload-offline-package.yaml
@@ -36,7 +36,7 @@ spec:
   steps:
     - name: upload-offline-tarballs
       workingDir: /workspace
-      image: python:3.12.7
+      image: python:3.13.0
       envFrom:
         - secretRef:
             name: $(params.env-secret-name)