diff --git a/Dockerfile b/Dockerfile
index 4462371..c24a53c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -9,7 +9,7 @@ FROM ${BCI_IMAGE} AS bci
 FROM ${CNI_IMAGE} AS cni
 FROM ${GO_IMAGE} AS builder
 # setup required packages
-ARG TAG=v3.30.3
+ARG TAG=v3.30.4
 RUN set -x && \
     apk --no-cache add \
     bash \
@@ -50,7 +50,7 @@ FROM calico/bird:v0.3.3-184-g202a2186-${ARCH} AS calico_bird
 ### BEGIN CALICOCTL ###
 FROM builder AS calico_ctl
 ARG ARCH
-ARG TAG=v3.30.3
+ARG TAG=v3.30.4
 ARG GOEXPERIMENT
 WORKDIR $GOPATH/src/github.com/projectcalico/calico/calicoctl
 RUN GIT_COMMIT=$(git rev-parse --short HEAD) \
@@ -68,7 +68,7 @@ RUN calicoctl --version
 ### BEGIN CALICO CNI ###
 FROM builder AS calico_cni
 ARG ARCH
-ARG TAG=v3.30.3
+ARG TAG=v3.30.4
 ARG GOEXPERIMENT
 WORKDIR $GOPATH/src/github.com/projectcalico/calico/cni-plugin
 COPY dualStack-changes.patch .
@@ -89,7 +89,7 @@ RUN install -s bin/* /opt/cni/bin/
 ### Can't use go-build-static.sh due to -Wl and --fatal-warnings flags ###
 FROM builder AS calico_node
 ARG ARCH
-ARG TAG=v3.30.3
+ARG TAG=v3.30.4
 ARG GOEXPERIMENT
 WORKDIR $GOPATH/src/github.com/projectcalico/calico/node
 RUN go mod download
@@ -131,7 +131,7 @@ RUN install -D -s bin/flexvoldriver /usr/local/bin/flexvol/flexvoldriver
 
 ### BEGIN CALICO KUBE-CONTROLLERS ###
 FROM builder AS calico_kubecontrollers
-ARG TAG=v3.30.3
+ARG TAG=v3.30.4
 ARG GOEXPERIMENT
 WORKDIR $GOPATH/src/github.com/projectcalico/calico/kube-controllers
 RUN GO_LDFLAGS="-linkmode=external \
diff --git a/Makefile b/Makefile
index eb2bd29..1c150d3 100644
--- a/Makefile
+++ b/Makefile
@@ -31,7 +31,7 @@ MACHINE := rancher
 TAG ?= ${GITHUB_ACTION_TAG}
 
 ifeq ($(TAG),)
-TAG := v3.30.3$(BUILD_META)
+TAG := v3.30.4$(BUILD_META)
 endif
 
 REPO ?= rancher