diff --git a/kubernetes/apps/kube-system/system-upgrade-controller/plans/kubernetes.yaml b/kubernetes/apps/kube-system/system-upgrade-controller/plans/kubernetes.yaml
index 56be2e2a16..85baf25ecd 100644
--- a/kubernetes/apps/kube-system/system-upgrade-controller/plans/kubernetes.yaml
+++ b/kubernetes/apps/kube-system/system-upgrade-controller/plans/kubernetes.yaml
@@ -5,7 +5,7 @@ metadata:
   name: kubernetes
 spec:
   # renovate: datasource=github-releases extractVersion=^v(?<version>.*)$ depName=kubernetes/kubernetes
-  version: 1.29.0
+  version: 1.29.1
   serviceAccountName: system-upgrade
   secrets:
     - name: talos
diff --git a/talos/talconfig.yaml b/talos/talconfig.yaml
index 7a5899505e..0464d08e48 100644
--- a/talos/talconfig.yaml
+++ b/talos/talconfig.yaml
@@ -11,7 +11,7 @@ endpoint: https://k8s.${domainName}:6443
 # renovate: datasource=docker depName=ghcr.io/buroa/installer
 talosVersion: v1.6.1
 # renovate: datasource=github-releases extractVersion=^v(?<version>.*)$ depName=kubernetes/kubernetes
-kubernetesVersion: 1.29.0
+kubernetesVersion: 1.29.1
 
 additionalApiServerCertSans:
   - ${clusterEndpointIP}