diff --git a/kubectl/Dockerfile b/kubectl/Dockerfile
index 30bd41c7b..4fd1a815e 100644
--- a/kubectl/Dockerfile
+++ b/kubectl/Dockerfile
@@ -1,6 +1,6 @@
 FROM amazon/aws-cli:latest
 
-ARG KUBECTL_VERSION=1.35.3
+ARG KUBECTL_VERSION=1.35.4
 ARG TARGETOS
 ARG TARGETARCH
 
diff --git a/kubectl/goss/goss.yaml b/kubectl/goss/goss.yaml
index e8bb3b998..9dd0c5cf0 100644
--- a/kubectl/goss/goss.yaml
+++ b/kubectl/goss/goss.yaml
@@ -6,4 +6,4 @@ command:
   /usr/local/bin/kubectl version --client=true --output=json:
     exit-status: 0
     stdout:
-      - v1.35.3
+      - v1.35.4
diff --git a/kubectl/variant.lock b/kubectl/variant.lock
index c5c401945..45c60f419 100644
--- a/kubectl/variant.lock
+++ b/kubectl/variant.lock
@@ -1,7 +1,7 @@
 dependencies:
   kubectl:
-    version: 1.35.3
-    previousVersion: 1.35.2
+    version: 1.35.4
+    previousVersion: 1.35.3
     versions:
     - 1.24.3
     - 1.24.4
@@ -42,3 +42,4 @@ dependencies:
     - 1.35.1
     - 1.35.2
     - 1.35.3
+    - 1.35.4