diff --git a/images/calico-go-build/Dockerfile b/images/calico-go-build/Dockerfile
index f28c1b80..e745f99d 100644
--- a/images/calico-go-build/Dockerfile
+++ b/images/calico-go-build/Dockerfile
@@ -59,7 +59,8 @@ RUN set -eux; \
     iproute-devel \
     iproute-tc \
     libbpf-devel \
-    llvm-${llvm_version}
+    llvm-${llvm_version} \
+    protobuf-devel
 
 RUN set -eux; \
     if [ "${TARGETARCH}" = "amd64" ]; then \
@@ -178,7 +179,7 @@ RUN set -eux; \
     go install golang.org/x/tools/cmd/goimports@v0.28.0 && \
     go install golang.org/x/tools/cmd/stringer@v0.28.0 && \
     go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@v1.5.1 && \
-    go install google.golang.org/protobuf/cmd/protoc-gen-go@v1.36.1 && \
+    go install google.golang.org/protobuf/cmd/protoc-gen-go@v1.36.4 && \
     go install gotest.tools/gotestsum@v1.12.0 && \
     go install k8s.io/code-generator/cmd/client-gen@v${k8s_libs_version} && \
     go install k8s.io/code-generator/cmd/conversion-gen@v${k8s_libs_version} && \
diff --git a/images/calico-go-build/versions.yaml b/images/calico-go-build/versions.yaml
index 7f1d5352..d99c0fe2 100644
--- a/images/calico-go-build/versions.yaml
+++ b/images/calico-go-build/versions.yaml
@@ -1,12 +1,12 @@
 golang:
-  version: 1.23.5
+  version: 1.23.6
   checksum:
     sha256:
-      amd64: cbcad4a6482107c7c7926df1608106c189417163428200ce357695cc7e01d091
-      arm64: 47c84d332123883653b70da2db7dd57d2a865921ba4724efcdf56b5da7021db0
-      ppc64le: db268bf5710b5b1b82ab38722ba6e4427d9e4942aed78c7d09195a9dff329613
-      s390x: 14924b917d35311eb130e263f34931043d4f9dc65f20684301bf8f60a72edcdf
+      amd64: 9379441ea310de000f33a4dc767bd966e72ab2826270e038e78b2c53c2e7802d
+      arm64: 561c780e8f4a8955d32bf72e46af0b5ee5e0debe1e4633df9a03781878219202
+      ppc64le: 0f817201e83d78ddbfa27f5f78d9b72450b92cc21d5e045145efacd0d3244a99
+      s390x: 321e7ed0d5416f731479c52fa7610b52b8079a8061967bd48cec6d66f671a60e
 kubernetes:
-  version: 1.31.4
+  version: 1.31.5
 llvm:
   version: 18.1.8