diff --git a/deploy/worker.yaml b/deploy/worker.yaml
index 4afb86e..a49d699 100644
--- a/deploy/worker.yaml
+++ b/deploy/worker.yaml
@@ -13,7 +13,7 @@ substitutions:
 
 steps:
   - id: Lock
-    name: golang:1.22.2
+    name: golang:1.23.0
     entrypoint: bash
     args:
       - -ec
@@ -27,7 +27,7 @@ steps:
 
   - id: Test
     # Run tests. Do this early, to avoid wasting time if they fail.
-    name: golang:1.22.2
+    name: golang:1.23.0
     entrypoint: bash
     args:
       - -ec
diff --git a/internal/sandbox/Makefile b/internal/sandbox/Makefile
index 3cffce4..4dfc9fb 100644
--- a/internal/sandbox/Makefile
+++ b/internal/sandbox/Makefile
@@ -13,7 +13,7 @@ test: /usr/local/bin/runsc testbundle
 
 
 # Release version must match the one in cmd/worker/Dockerfile.
-RUNSC_URL := https://storage.googleapis.com/gvisor/releases/release/20240722.0/$(shell uname -m)
+RUNSC_URL := https://storage.googleapis.com/gvisor/releases/release/20240930.0/$(shell uname -m)
 
 # This is an edited version of the commands at https://gvisor.dev/docs/user_guide/install.
 /usr/local/bin/runsc: