diff --git a/.drone.jsonnet b/.drone.jsonnet
index d8f37d9893..a789d03567 100644
--- a/.drone.jsonnet
+++ b/.drone.jsonnet
@@ -152,7 +152,7 @@ local TriggerDownstream(name, target, repositories, image='', params=[], depends
 // This provides the docker service.
 local docker = {
   name: 'docker',
-  image: 'docker:25.0.2-dind',
+  image: 'docker:26.1-dind',
   entrypoint: ['dockerd'],
   privileged: true,
   command: [
diff --git a/Makefile b/Makefile
index 6c1c693901..4eb4f0b498 100644
--- a/Makefile
+++ b/Makefile
@@ -15,10 +15,10 @@ NAME = Talos
 CLOUD_IMAGES_EXTRA_ARGS ?= ""
 
 ARTIFACTS := _out
-TOOLS ?= ghcr.io/siderolabs/tools:v1.7.0-1-g10b2a69
+TOOLS ?= ghcr.io/siderolabs/tools:v1.7.0-2-g345db93
 
 PKGS_PREFIX ?= ghcr.io/siderolabs
-PKGS ?= v1.7.0-9-g76bd73c
+PKGS ?= v1.7.0-14-g9caa8be
 EXTRAS ?= v1.7.0-1-gbb76755
 
 PKG_FHS ?= $(PKGS_PREFIX)/fhs:$(PKGS)
diff --git a/go.mod b/go.mod
index f3fbd9fc9e..ed63749883 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/siderolabs/talos
 
-go 1.22.2
+go 1.22.3
 
 replace (
 	// forked coredns so we don't carry caddy and other stuff into the Talos
diff --git a/go.work b/go.work
index 1074f7d79d..0d9ce654f5 100644
--- a/go.work
+++ b/go.work
@@ -1,4 +1,4 @@
-go 1.22.2
+go 1.22.3
 
 use (
 	.
diff --git a/hack/cloud-image-uploader/go.mod b/hack/cloud-image-uploader/go.mod
index d06bf85f37..000f830e69 100644
--- a/hack/cloud-image-uploader/go.mod
+++ b/hack/cloud-image-uploader/go.mod
@@ -1,6 +1,6 @@
 module github.com/siderolabs/cloud-image-uploader
 
-go 1.22.2
+go 1.22.3
 
 require (
 	github.com/Azure/azure-sdk-for-go v68.0.0+incompatible
diff --git a/hack/docgen/go.mod b/hack/docgen/go.mod
index 3c5bd152b5..08f8198556 100644
--- a/hack/docgen/go.mod
+++ b/hack/docgen/go.mod
@@ -1,6 +1,6 @@
 module github.com/siderolabs/talos-hack-docgen
 
-go 1.22.2
+go 1.22.3
 
 // forked go-yaml that introduces RawYAML interface, which can be used to populate YAML fields using bytes
 // which are then encoded as a valid YAML blocks with proper indentiation
diff --git a/hack/gotagsrewrite/go.mod b/hack/gotagsrewrite/go.mod
index 54b28812bb..e4ba369896 100644
--- a/hack/gotagsrewrite/go.mod
+++ b/hack/gotagsrewrite/go.mod
@@ -1,6 +1,6 @@
 module github.com/siderolabs/gotagsrewrite
 
-go 1.22.2
+go 1.22.3
 
 require (
 	github.com/fatih/structtag v1.2.0
diff --git a/hack/module-sig-verify/go.mod b/hack/module-sig-verify/go.mod
index e289f03eae..2a9a398900 100644
--- a/hack/module-sig-verify/go.mod
+++ b/hack/module-sig-verify/go.mod
@@ -1,5 +1,5 @@
 module module-sig-verify
 
-go 1.22.2
+go 1.22.3
 
 require go.mozilla.org/pkcs7 v0.0.0-20210826202110-33d05740a352
diff --git a/hack/release.toml b/hack/release.toml
index 21fcafe939..9efd9104e3 100644
--- a/hack/release.toml
+++ b/hack/release.toml
@@ -6,7 +6,7 @@ github_repo = "siderolabs/talos"
 match_deps = "^github.com/((talos-systems|siderolabs)/[a-zA-Z0-9-]+)$"
 
 # previous release
-previous = "v1.7.0"
+previous = "v1.7.1"
 
 pre_release = false
 
@@ -17,10 +17,9 @@ preface = """\
     [notes.updates]
         title = "Component Updates"
         description = """\
-Linux: 6.6.29
-containerd: 1.7.16
+Linux: 6.6.30
 
-Talos is built with Go 1.22.2.
+Talos is built with Go 1.22.3.
 """
 
 
diff --git a/hack/structprotogen/go.mod b/hack/structprotogen/go.mod
index c3ee673401..2549e2573f 100644
--- a/hack/structprotogen/go.mod
+++ b/hack/structprotogen/go.mod
@@ -1,6 +1,6 @@
 module github.com/siderolabs/structprotogen
 
-go 1.22.2
+go 1.22.3
 
 require (
 	github.com/fatih/structtag v1.2.0
diff --git a/pkg/machinery/constants/constants.go b/pkg/machinery/constants/constants.go
index 0b2d80d63e..b02f174f36 100644
--- a/pkg/machinery/constants/constants.go
+++ b/pkg/machinery/constants/constants.go
@@ -14,7 +14,7 @@ import (
 
 const (
 	// DefaultKernelVersion is the default Linux kernel version.
-	DefaultKernelVersion = "6.6.29-talos"
+	DefaultKernelVersion = "6.6.30-talos"
 
 	// KernelModulesPath is the default path to the kernel modules without the kernel version.
 	KernelModulesPath = "/lib/modules"
@@ -881,7 +881,7 @@ const (
 	DBusClientSocketPath = "/run/dbus/system_bus_socket"
 
 	// GoVersion is the version of Go compiler this release was built with.
-	GoVersion = "go1.22.2"
+	GoVersion = "go1.22.3"
 
 	// KubernetesTalosAPIServiceName is the name of the Kubernetes service to access Talos API.
 	KubernetesTalosAPIServiceName = "talos"
diff --git a/pkg/machinery/gendata/data/pkgs b/pkg/machinery/gendata/data/pkgs
index d8ced3c587..362d11fd99 100644
--- a/pkg/machinery/gendata/data/pkgs
+++ b/pkg/machinery/gendata/data/pkgs
@@ -1 +1 @@
-v1.7.0-9-g76bd73c
\ No newline at end of file
+v1.7.0-14-g9caa8be
\ No newline at end of file
diff --git a/pkg/machinery/go.mod b/pkg/machinery/go.mod
index 9ec11c0c80..3a25738bd6 100644
--- a/pkg/machinery/go.mod
+++ b/pkg/machinery/go.mod
@@ -1,6 +1,6 @@
 module github.com/siderolabs/talos/pkg/machinery
 
-go 1.22.2
+go 1.22.3
 
 // forked go-yaml that introduces RawYAML interface, which can be used to populate YAML fields using bytes
 // which are then encoded as a valid YAML blocks with proper indentiation