diff --git a/bootstrap/templates/addons/system-upgrade-controller/plans/agent.yaml.j2 b/bootstrap/templates/addons/system-upgrade-controller/plans/agent.yaml.j2
index 3a79b16a0a1..192774c55cc 100644
--- a/bootstrap/templates/addons/system-upgrade-controller/plans/agent.yaml.j2
+++ b/bootstrap/templates/addons/system-upgrade-controller/plans/agent.yaml.j2
@@ -6,7 +6,7 @@ metadata:
   namespace: system-upgrade
 spec:
   # renovate: datasource=github-releases depName=k3s-io/k3s
-  version: "v1.28.2+k3s1"
+  version: "v1.28.3+k3s1"
   serviceAccountName: system-upgrade
   concurrency: 1
   nodeSelector:
diff --git a/bootstrap/templates/addons/system-upgrade-controller/plans/server.yaml.j2 b/bootstrap/templates/addons/system-upgrade-controller/plans/server.yaml.j2
index 75a9e8ffc95..c2487887928 100644
--- a/bootstrap/templates/addons/system-upgrade-controller/plans/server.yaml.j2
+++ b/bootstrap/templates/addons/system-upgrade-controller/plans/server.yaml.j2
@@ -6,7 +6,7 @@ metadata:
   namespace: system-upgrade
 spec:
   # renovate: datasource=github-releases depName=k3s-io/k3s
-  version: "v1.28.2+k3s1"
+  version: "v1.28.3+k3s1"
   serviceAccountName: system-upgrade
   concurrency: 1
   cordon: true
diff --git a/bootstrap/templates/ansible/inventory/group_vars/kubernetes/main.yaml.j2 b/bootstrap/templates/ansible/inventory/group_vars/kubernetes/main.yaml.j2
index 8861bce0dea..7b010444940 100644
--- a/bootstrap/templates/ansible/inventory/group_vars/kubernetes/main.yaml.j2
+++ b/bootstrap/templates/ansible/inventory/group_vars/kubernetes/main.yaml.j2
@@ -6,7 +6,7 @@
 #
 
 # renovate: datasource=github-releases depName=k3s-io/k3s
-k3s_release_version: "v1.28.2+k3s1"
+k3s_release_version: "v1.28.3+k3s1"
 k3s_install_hard_links: true
 k3s_become: true
 k3s_etcd_datastore: true