diff --git a/images/tools/Earthfile b/images/tools/Earthfile
index cb30c4d6f4b195113a4b24dc80bfb2bc98ead0ef..b65940fa5b4a036104fd50f9451c7dcb2516b3dd 100644
--- a/images/tools/Earthfile
+++ b/images/tools/Earthfile
@@ -5,7 +5,7 @@ kubectl:
     FROM ../mirror+fedora
 
     # renovate: datasource=github-releases depName=kubernetes/kubernetes
-    ARG KUBECTL_VERSION=v1.28.3
+    ARG KUBECTL_VERSION=v1.28.4
     ENV KUBECTL_VERSION=${KUBECTL_VERSION}
 
     RUN curl -LO "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl" \