diff --git a/.github/workflows/link-check.yaml b/.github/workflows/link-check.yaml
index 4be95cfe..9d58e1a5 100644
--- a/.github/workflows/link-check.yaml
+++ b/.github/workflows/link-check.yaml
@@ -22,7 +22,7 @@ jobs:
 
       - name: Find Link Checker Issue
         id: link-checker-issue
-        uses: micalevisk/last-issue-action@305829d9728f47beb0029417167a0af890edfd6e # v2.1.0
+        uses: micalevisk/last-issue-action@f5661581217cc78cc282d1351aa65bd8bd155003 # v2.2.1
         with:
           state: open
           labels: |
diff --git a/ansible/inventory/group_vars/kubernetes/main.yaml b/ansible/inventory/group_vars/kubernetes/main.yaml
index fd9b5a90..8c33022c 100644
--- a/ansible/inventory/group_vars/kubernetes/main.yaml
+++ b/ansible/inventory/group_vars/kubernetes/main.yaml
@@ -5,7 +5,7 @@
 #
 
 # renovate: datasource=github-releases depName=k3s-io/k3s
-k3s_release_version: "v1.28.2+k3s1"
+k3s_release_version: "v1.28.3+k3s1"
 k3s_install_hard_links: true
 k3s_become: true
 k3s_etcd_datastore: true
diff --git a/bootstrap/templates/addons/system-upgrade-controller/plans/agent.yaml.j2 b/bootstrap/templates/addons/system-upgrade-controller/plans/agent.yaml.j2
index 3a79b16a..192774c5 100644
--- a/bootstrap/templates/addons/system-upgrade-controller/plans/agent.yaml.j2
+++ b/bootstrap/templates/addons/system-upgrade-controller/plans/agent.yaml.j2
@@ -6,7 +6,7 @@ metadata:
   namespace: system-upgrade
 spec:
   # renovate: datasource=github-releases depName=k3s-io/k3s
-  version: "v1.28.2+k3s1"
+  version: "v1.28.3+k3s1"
   serviceAccountName: system-upgrade
   concurrency: 1
   nodeSelector:
diff --git a/bootstrap/templates/addons/system-upgrade-controller/plans/server.yaml.j2 b/bootstrap/templates/addons/system-upgrade-controller/plans/server.yaml.j2
index 75a9e8ff..c2487887 100644
--- a/bootstrap/templates/addons/system-upgrade-controller/plans/server.yaml.j2
+++ b/bootstrap/templates/addons/system-upgrade-controller/plans/server.yaml.j2
@@ -6,7 +6,7 @@ metadata:
   namespace: system-upgrade
 spec:
   # renovate: datasource=github-releases depName=k3s-io/k3s
-  version: "v1.28.2+k3s1"
+  version: "v1.28.3+k3s1"
   serviceAccountName: system-upgrade
   concurrency: 1
   cordon: true
diff --git a/bootstrap/templates/ansible/inventory/group_vars/kubernetes/main.yaml.j2 b/bootstrap/templates/ansible/inventory/group_vars/kubernetes/main.yaml.j2
index 8861bce0..7b010444 100644
--- a/bootstrap/templates/ansible/inventory/group_vars/kubernetes/main.yaml.j2
+++ b/bootstrap/templates/ansible/inventory/group_vars/kubernetes/main.yaml.j2
@@ -6,7 +6,7 @@
 #
 
 # renovate: datasource=github-releases depName=k3s-io/k3s
-k3s_release_version: "v1.28.2+k3s1"
+k3s_release_version: "v1.28.3+k3s1"
 k3s_install_hard_links: true
 k3s_become: true
 k3s_etcd_datastore: true