diff --git a/.drone.yml b/.drone.yml
index 5695c7fe7c5da..914b24e76c33f 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -1013,7 +1013,7 @@ type: kubernetes
 name: build-linux-amd64-centos7
 environment:
   BUILDBOX_VERSION: teleport12
-  RUNTIME: go1.20.11
+  RUNTIME: go1.20.12
 trigger:
   event:
     include:
@@ -1222,7 +1222,7 @@ type: kubernetes
 name: build-linux-amd64-centos7-fips
 environment:
   BUILDBOX_VERSION: teleport12
-  RUNTIME: go1.20.11
+  RUNTIME: go1.20.12
 trigger:
   event:
     include:
@@ -1430,7 +1430,7 @@ type: kubernetes
 name: build-linux-amd64
 environment:
   BUILDBOX_VERSION: teleport12
-  RUNTIME: go1.20.11
+  RUNTIME: go1.20.12
 trigger:
   event:
     include:
@@ -1645,7 +1645,7 @@ type: kubernetes
 name: build-linux-amd64-fips
 environment:
   BUILDBOX_VERSION: teleport12
-  RUNTIME: go1.20.11
+  RUNTIME: go1.20.12
 trigger:
   event:
     include:
@@ -2945,7 +2945,7 @@ type: kubernetes
 name: build-linux-386
 environment:
   BUILDBOX_VERSION: teleport12
-  RUNTIME: go1.20.11
+  RUNTIME: go1.20.12
 trigger:
   event:
     include:
@@ -3771,7 +3771,7 @@ type: kubernetes
 name: build-linux-arm
 environment:
   BUILDBOX_VERSION: teleport12
-  RUNTIME: go1.20.11
+  RUNTIME: go1.20.12
 trigger:
   event:
     include:
@@ -19264,6 +19264,6 @@ image_pull_secrets:
 - DOCKERHUB_CREDENTIALS
 ---
 kind: signature
-hmac: c94d544ca9f9fe4fc75e90f0c46dc20f3f1030d242c541f4cab4b2066a078892
+hmac: bc1d914fc32bcd68597f22fe1be6568fc9f718b5dfcecde022f7a69ba6b27a62
 
 ...
diff --git a/build.assets/versions.mk b/build.assets/versions.mk
index ce4fe6021e593..94cfd0fff29e7 100644
--- a/build.assets/versions.mk
+++ b/build.assets/versions.mk
@@ -1,7 +1,7 @@
 # Keep all tool versions in one place.
 # This file can be included in other Makefiles to avoid duplication.
 
-GOLANG_VERSION ?= go1.20.11
+GOLANG_VERSION ?= go1.20.12
 
 NODE_VERSION ?= 18.18.2