diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index fd69714c723..cbea581f13b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -20,14 +20,14 @@ jobs:
     uses: caarlos0/meta/.github/workflows/govulncheck.yml@main
     with:
       cache: true
-      go-version: '>=1.19.2'
+      go-version: '>=1.19.3'
   semgrep:
     uses: caarlos0/meta/.github/workflows/semgrep.yml@main
   ruleguard:
     uses: caarlos0/meta/.github/workflows/ruleguard.yml@main
     with:
       cache: true
-      go-version: '>=1.19.2'
+      go-version: '>=1.19.3'
       args: '-disable largeloopcopy'
   test:
     runs-on: ubuntu-latest
@@ -52,7 +52,7 @@ jobs:
           mkdir -p $HOME/.cache/snapcraft/stage-packages
       - uses: actions/setup-go@c4a742cab115ed795e34d4513e2cf7d472deb55f # v3
         with:
-          go-version: '>=1.19.2'
+          go-version: '>=1.19.3'
           cache: true
       - uses: sigstore/cosign-installer@v2.8.1
       - uses: anchore/sbom-action/download-syft@v0.13.0
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index deb05de7cdb..a2d58efa541 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -23,7 +23,7 @@ jobs:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
       - uses: actions/setup-go@c4a742cab115ed795e34d4513e2cf7d472deb55f # v3
         with:
-          go-version: '>=1.19.2'
+          go-version: '>=1.19.3'
       - run: task docs:build
       - uses: wjdp/htmltest-action@09118714cd26bef56bd3d0819e4f9b1dce6f60a9 # master
         with:
diff --git a/.github/workflows/fig.yml b/.github/workflows/fig.yml
index 6c0d61b56e8..c76a433ad55 100644
--- a/.github/workflows/fig.yml
+++ b/.github/workflows/fig.yml
@@ -16,7 +16,7 @@ jobs:
       - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3
       - uses: actions/setup-go@c4a742cab115ed795e34d4513e2cf7d472deb55f # v3
         with:
-          go-version: '>=1.19.2'
+          go-version: '>=1.19.3'
           cache: true
       - run: go run . generate-fig-spec >goreleaser.ts
       - uses: withfig/push-to-fig-autocomplete-action@v1
diff --git a/.github/workflows/generate.yml b/.github/workflows/generate.yml
index 4960d566daa..da77601083c 100644
--- a/.github/workflows/generate.yml
+++ b/.github/workflows/generate.yml
@@ -24,7 +24,7 @@ jobs:
           token: ${{ secrets.GH_PAT }}
       - uses: actions/setup-go@c4a742cab115ed795e34d4513e2cf7d472deb55f # v3
         with:
-          go-version: '>=1.19.2'
+          go-version: '>=1.19.3'
           cache: true
       - uses: arduino/setup-task@d665c6beebae46ff3f699d7b2fd3f1959de7153c # v1
       - run: task docs:generate
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 125e784da23..21963c85c26 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -19,7 +19,7 @@ jobs:
     steps:
       - uses: actions/setup-go@c4a742cab115ed795e34d4513e2cf7d472deb55f # v3
         with:
-          go-version: '>=1.19.2'
+          go-version: '>=1.19.3'
       - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3
       - name: golangci-lint
         uses: golangci/golangci-lint-action@07db5389c99593f11ad7b44463c2d4233066a9b1 # v3
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 10ad8bb8265..e84df83297a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -63,7 +63,7 @@ jobs:
           mkdir -p $HOME/.cache/snapcraft/stage-packages
       - uses: actions/setup-go@c4a742cab115ed795e34d4513e2cf7d472deb55f # v3
         with:
-          go-version: '>=1.19.2'
+          go-version: '>=1.19.3'
           cache: true
       - uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # v3
         with:
diff --git a/www/docs/ci/actions.md b/www/docs/ci/actions.md
index 95099c94d1a..53505fc87be 100644
--- a/www/docs/ci/actions.md
+++ b/www/docs/ci/actions.md
@@ -36,7 +36,7 @@ jobs:
       - run: git fetch --force --tags
       - uses: actions/setup-go@v3
         with:
-          go-version: '>=1.19.2'
+          go-version: '>=1.19.3'
           cache: true
       # More assembly might be required: Docker logins, GPG, etc. It all depends
       # on your needs.