diff --git a/Makefile b/Makefile
index ca0bc6f3fc..40ddf01281 100644
--- a/Makefile
+++ b/Makefile
@@ -109,7 +109,7 @@ K8S_VERSION?=v1.37.0-beta.0
 LLVM_VERSION?=21.1.8
 # Calico toolchain versions and the calico/go-build image to use.
 GO_BUILD_VER?=$(GO_VERSION)-llvm$(LLVM_VERSION)-k8s$(K8S_VERSION:v%=%)
-CALICO_BASE_VER ?= ubi9-1784675397
+CALICO_BASE_VER ?= ubi9-1785279094
 CALICO_BUILD?=calico/go-build:$(GO_BUILD_VER)-$(BUILDARCH)
 CALICO_BASE ?= calico/base:$(CALICO_BASE_VER)
 SRC_FILES=$(shell find ./pkg -name '*.go')
diff --git a/api/go.mod b/api/go.mod
index d2dbbe4095..88253c4970 100644
--- a/api/go.mod
+++ b/api/go.mod
@@ -42,7 +42,7 @@ require (
 	golang.org/x/text v0.40.0 // indirect
 	google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
-	k8s.io/apiextensions-apiserver v0.36.2 // indirect
+	k8s.io/apiextensions-apiserver v0.36.3 // indirect
 	k8s.io/klog/v2 v2.140.0 // indirect
 	k8s.io/kube-openapi v0.0.0-20260618221249-bc653b64f974 // indirect
 	k8s.io/utils v0.0.0-20260626114624-be93311217bd // indirect
diff --git a/api/go.sum b/api/go.sum
index dddc8dc41a..8f5d40374a 100644
--- a/api/go.sum
+++ b/api/go.sum
@@ -118,8 +118,8 @@ gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 k8s.io/api v0.37.0-beta.0 h1:5OA+YtMLhsSsrBVGwD24bMElfe8pm3DHjoLt9XyNYI0=
 k8s.io/api v0.37.0-beta.0/go.mod h1:aIaUwCd8eIILpyYn1h5+O188xbEz4A3MMXZfzOrVMYg=
-k8s.io/apiextensions-apiserver v0.36.2 h1:3O5gqOj/dt2XWWbpMe+TXWpE9yU6pjM/tXxtHHJT/K4=
-k8s.io/apiextensions-apiserver v0.36.2/go.mod h1:cL1tBWe8XSaP1H30iWKGo7hf6iAUUUJPEU70dskmAnA=
+k8s.io/apiextensions-apiserver v0.36.3 h1:dPmOAPhwTtqb1bTxbFPsy18KHPhktQeO3WUPXunZIB0=
+k8s.io/apiextensions-apiserver v0.36.3/go.mod h1:KTXFqgXiuw2pRoL+Wpmttqc+up9Xt/GohadPWeLLOa4=
 k8s.io/apimachinery v0.37.0-beta.0 h1:AgONL5RlVP+UzEzmDx1R2RHd/lp6YJ2QS9AHD92dTFI=
 k8s.io/apimachinery v0.37.0-beta.0/go.mod h1:RLRmd2kYSdlBaTwCmVbVETZqxaNoqGWOF0S0SG/gThg=
 k8s.io/klog/v2 v2.140.0 h1:Tf+J3AH7xnUzZyVVXhTgGhEKnFqye14aadWv7bzXdzc=
diff --git a/go.mod b/go.mod
index 3ea35cf370..01214648fb 100644
--- a/go.mod
+++ b/go.mod
@@ -193,11 +193,11 @@ require (
 	gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
 	gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect
 	howett.net/plist v1.0.1 // indirect
-	k8s.io/cli-runtime v0.36.2 // indirect
+	k8s.io/cli-runtime v0.36.3 // indirect
 	k8s.io/component-base v0.37.0-beta.0 // indirect
 	k8s.io/klog/v2 v2.140.0 // indirect
 	k8s.io/kube-openapi v0.0.0-20260618221249-bc653b64f974 // indirect
-	k8s.io/kubectl v0.36.2 // indirect
+	k8s.io/kubectl v0.36.3 // indirect
 	oras.land/oras-go/v2 v2.6.2 // indirect
 	sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
 	sigs.k8s.io/kustomize/api v0.21.1 // indirect
diff --git a/go.sum b/go.sum
index a50ad0462e..b2c85a7e06 100644
--- a/go.sum
+++ b/go.sum
@@ -592,8 +592,8 @@ k8s.io/apimachinery v0.37.0-beta.0 h1:AgONL5RlVP+UzEzmDx1R2RHd/lp6YJ2QS9AHD92dTF
 k8s.io/apimachinery v0.37.0-beta.0/go.mod h1:RLRmd2kYSdlBaTwCmVbVETZqxaNoqGWOF0S0SG/gThg=
 k8s.io/apiserver v0.37.0-beta.0 h1:GZI0O9+kJ8rfKo/W5Ug6IUU79xB6XUb8BwC1DuZIs4o=
 k8s.io/apiserver v0.37.0-beta.0/go.mod h1:a+2CICxJD6uJAmiAfOxzIEL0p4HLnfDlsuwmHJs6s+U=
-k8s.io/cli-runtime v0.36.2 h1:CconTvEeV4DJs4ZX3HQKCFbFRGsm6OtuBM9yjmMP2VM=
-k8s.io/cli-runtime v0.36.2/go.mod h1:LddcjiMf4YlnHO7c1Y7rEtDqL84FyiYVLco7V679GUU=
+k8s.io/cli-runtime v0.36.3 h1:g+eJ+M1sYpnNYp/q5fzaw2KejIL0Q7DH+xFl6YVoL4U=
+k8s.io/cli-runtime v0.36.3/go.mod h1:hZpAqK8nSFXvvLaVCbzUPVp8e9TRLSTCfpNzMt7s3tE=
 k8s.io/client-go v0.37.0-beta.0 h1:WfKGOp3Ai9fCvZlS4HaBxgpyPMMKaX6fKya2WM3xmq8=
 k8s.io/client-go v0.37.0-beta.0/go.mod h1:4ftZEJQaLYQOzc78hg8y7IzGyivzZ2ICL3qOZ7rDxzg=
 k8s.io/component-base v0.37.0-beta.0 h1:oFDAstSbhOPQkhbDVyyb9OyFmHakAwXuUem/nLLiwmI=
@@ -604,8 +604,8 @@ k8s.io/kube-aggregator v0.37.0-beta.0 h1:siaTDLzoPhC8uAIWKQvR0/9e99yULdNUei5WE41
 k8s.io/kube-aggregator v0.37.0-beta.0/go.mod h1:936LICakWn2gN2QTonvcffq4XB6FpjxLqa7wdbTRYjw=
 k8s.io/kube-openapi v0.0.0-20260618221249-bc653b64f974 h1:JVogoTvOj6gutlx8bUwGh0e8o8L4X8nDbTLyONmoVvk=
 k8s.io/kube-openapi v0.0.0-20260618221249-bc653b64f974/go.mod h1:V/QaCUYDa+0QpcHhVVc5l99Uz56wEMEXBSj9oCDkNDY=
-k8s.io/kubectl v0.36.2 h1:rpUGGpeL09XVOLep2yle5jrtk//JA1L6ZHfkQQtVEwk=
-k8s.io/kubectl v0.36.2/go.mod h1:gVbQ3B/yb4bSR2ggQ7rd0W6icUSWs7sduH4e16Vii+0=
+k8s.io/kubectl v0.36.3 h1:TesKp+XYQEjPYoFvuobcVnuvira2+/xAVlq//+kksaI=
+k8s.io/kubectl v0.36.3/go.mod h1:W+NEb1CzBGmoaI1Nrpn2ETo9omNBl0AsyxnnMT40N6E=
 k8s.io/utils v0.0.0-20260626114624-be93311217bd h1:Ea7fgQ5we8Y9T0OX5o0dAHzQOBRI07D/dEYRaB9ZZEs=
 k8s.io/utils v0.0.0-20260626114624-be93311217bd/go.mod h1:xDxuJ0whA3d0I4mf/C4ppKHxXynQ+fxnkmQH0vTHnuk=
 oras.land/oras-go/v2 v2.6.2 h1:N04RXngAp1LJKTG6ifz3xHPipasEkWr+hFmInja5YKo=