diff --git a/Dockerfile b/Dockerfile
index 649f3519..8dbbf847 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,8 +1,8 @@
 # syntax=docker/dockerfile:1
 
-ARG GO_VERSION="1.24"
+ARG GO_VERSION="1.25"
 ARG ALPINE_VERSION="3.23"
-ARG XX_VERSION="1.6.1"
+ARG XX_VERSION="1.9.0"
 
 FROM --platform=$BUILDPLATFORM tonistiigi/xx:${XX_VERSION} AS xx
 
diff --git a/hack/gen.Dockerfile b/hack/gen.Dockerfile
index ed1edd1d..3369498e 100644
--- a/hack/gen.Dockerfile
+++ b/hack/gen.Dockerfile
@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1
 
-ARG GO_VERSION="1.24"
+ARG GO_VERSION="1.25"
 ARG PROTOC_VERSION="3.17.3"
 
 # protoc is dynamically linked to glibc so can't use alpine base
diff --git a/hack/govulncheck.Dockerfile b/hack/govulncheck.Dockerfile
index ec9958e7..de3ead7e 100644
--- a/hack/govulncheck.Dockerfile
+++ b/hack/govulncheck.Dockerfile
@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1
 
-ARG GO_VERSION="1.24"
+ARG GO_VERSION="1.25"
 ARG ALPINE_VERSION="3.23"
 
 ARG GOVULNCHECK_VERSION="v1.1.4"
diff --git a/hack/lint.Dockerfile b/hack/lint.Dockerfile
index a7bb2ec5..8759c26e 100644
--- a/hack/lint.Dockerfile
+++ b/hack/lint.Dockerfile
@@ -1,7 +1,7 @@
 # syntax=docker/dockerfile:1
 
-ARG GO_VERSION="1.24"
-ARG XX_VERSION="1.6.1"
+ARG GO_VERSION="1.25"
+ARG XX_VERSION="1.9.0"
 ARG ALPINE_VERSION="3.23"
 ARG GOLANGCI_LINT_VERSION="v2.1.6"
 ARG GOLANGCI_FROM_SOURCE="true"
diff --git a/hack/vendor.Dockerfile b/hack/vendor.Dockerfile
index 3eb5b580..6ce5791f 100644
--- a/hack/vendor.Dockerfile
+++ b/hack/vendor.Dockerfile
@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1
 
-ARG GO_VERSION="1.24"
+ARG GO_VERSION="1.25"
 ARG ALPINE_VERSION="3.23"
 ARG GOMOD_OUTDATED_VERSION="v0.8.0"