diff --git a/build/build-image/cross/VERSION b/build/build-image/cross/VERSION
index abe816e2a72ab..0367120fe8147 100644
--- a/build/build-image/cross/VERSION
+++ b/build/build-image/cross/VERSION
@@ -1 +1 @@
-v1.22.0-go1.16.14-buster.0
+v1.22.0-go1.16.15-buster.0
diff --git a/build/common.sh b/build/common.sh
index 4a30ef3e99dcd..ee493f7a1ff0f 100755
--- a/build/common.sh
+++ b/build/common.sh
@@ -87,7 +87,7 @@ readonly KUBE_CONTAINER_RSYNC_PORT=8730
 
 # These are the default versions (image tags) for their respective base images.
 readonly __default_debian_iptables_version=buster-v1.6.7
-readonly __default_go_runner_version=v2.3.1-go1.16.14-buster.0
+readonly __default_go_runner_version=v2.3.1-go1.16.15-buster.0
 readonly __default_setcap_version=buster-v2.0.4
 
 # These are the base images for the Docker-wrapped binaries.
diff --git a/build/dependencies.yaml b/build/dependencies.yaml
index c060e604aea0f..bfa92249400a9 100644
--- a/build/dependencies.yaml
+++ b/build/dependencies.yaml
@@ -101,7 +101,7 @@ dependencies:
 
   # Golang
   - name: "golang: upstream version"
-    version: 1.16.14
+    version: 1.16.15
     refPaths:
     - path: build/build-image/cross/VERSION
     - path: cluster/addons/fluentd-elasticsearch/es-image/Dockerfile
@@ -124,7 +124,7 @@ dependencies:
       match: minimum_go_version=go([0-9]+\.[0-9]+)
 
   - name: "k8s.gcr.io/kube-cross: dependents"
-    version: v1.22.0-go1.16.14-buster.0
+    version: v1.22.0-go1.16.15-buster.0
     refPaths:
     - path: build/build-image/cross/VERSION
 
@@ -152,7 +152,7 @@ dependencies:
       match: configs\[DebianIptables\] = Config{list\.BuildImageRegistry, "debian-iptables", "[a-zA-Z]+\-v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)"}
 
   - name: "k8s.gcr.io/go-runner: dependents"
-    version: v2.3.1-go1.16.14-buster.0
+    version: v2.3.1-go1.16.15-buster.0
     refPaths:
     - path: build/common.sh
       match: __default_go_runner_version=
diff --git a/cluster/addons/fluentd-elasticsearch/es-image/Dockerfile b/cluster/addons/fluentd-elasticsearch/es-image/Dockerfile
index 66303ca7aeca0..c350d79c39783 100644
--- a/cluster/addons/fluentd-elasticsearch/es-image/Dockerfile
+++ b/cluster/addons/fluentd-elasticsearch/es-image/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.16.14 AS builder
+FROM golang:1.16.15 AS builder
 COPY elasticsearch_logging_discovery.go go.mod go.sum /
 RUN CGO_ENABLED=0 GOOS=linux GO111MODULE=on go build -a -ldflags "-w" -o /elasticsearch_logging_discovery /elasticsearch_logging_discovery.go
 
diff --git a/staging/publishing/rules.yaml b/staging/publishing/rules.yaml
index 416917125c50d..1279e5700a728 100644
--- a/staging/publishing/rules.yaml
+++ b/staging/publishing/rules.yaml
@@ -7,7 +7,7 @@ recursive-delete-patterns:
 - BUILD.bazel
 - "*/BUILD.bazel"
 - Gopkg.toml
-default-go-version: 1.16.14
+default-go-version: 1.16.15
 rules:
 - destination: code-generator
   branches:
diff --git a/test/images/Makefile b/test/images/Makefile
index db778b8c44772..b2a82160b3694 100644
--- a/test/images/Makefile
+++ b/test/images/Makefile
@@ -16,7 +16,7 @@ REGISTRY ?= gcr.io/kubernetes-e2e-test-images
 GOARM ?= 7
 DOCKER_CERT_BASE_PATH ?=
 QEMUVERSION=v5.1.0-2
-GOLANG_VERSION=1.16.14
+GOLANG_VERSION=1.16.15
 export
 
 ifndef WHAT