diff --git a/infrastructure/base/system-upgrades/talos/kubernetes.yaml b/infrastructure/base/system-upgrades/talos/kubernetes.yaml
index 227c6373eb5d843fdb2935890f5d68265dbc5912..06dfe3cdf9f1b56518acb941090cbc211621fbfa 100644
--- a/infrastructure/base/system-upgrades/talos/kubernetes.yaml
+++ b/infrastructure/base/system-upgrades/talos/kubernetes.yaml
@@ -7,7 +7,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/substitute: disabled
 spec:
   # renovate: datasource=github-releases depName=siderolabs/kubelet extractVersion=^v(?<version>.*)$
-  version: "1.32.3"
+  version: "1.33.0"
   serviceAccountName: system-upgrade-executer
   secrets:
     - name: talos-admin
@@ -54,7 +54,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/substitute: disabled
 spec:
   # renovate: datasource=github-releases depName=siderolabs/kubelet extractVersion=^v(?<version>.*)$
-  version: "1.32.3"
+  version: "1.33.0"
   serviceAccountName: system-upgrade-executer
   secrets:
     - name: talos-admin
diff --git a/talos/talconfig.yaml b/talos/talconfig.yaml
index a9e586909da9023933fa77d303d47cdaa32fb40b..6945404b45df52122fb9393e35c29c67df267ac8 100644
--- a/talos/talconfig.yaml
+++ b/talos/talconfig.yaml
@@ -4,7 +4,7 @@ clusterName: k8s01
 # renovate: datasource=github-releases depName=siderolabs/talos
 talosVersion: v1.9.5
 # renovate: datasource=github-releases depName=siderolabs/kubelet
-kubernetesVersion: v1.32.3
+kubernetesVersion: v1.33.0
 endpoint: https://api.${clusterDomain}:6443
 domain: cluster.local
 allowSchedulingOnControlPlanes: true