diff --git a/config/samples/dataplane-bluegreen-rollout.yaml b/config/samples/dataplane-bluegreen-rollout.yaml
index 1169ce4f..33a4b153 100644
--- a/config/samples/dataplane-bluegreen-rollout.yaml
+++ b/config/samples/dataplane-bluegreen-rollout.yaml
@@ -14,7 +14,7 @@ spec:
         containers:
         - name: proxy
           # renovate: datasource=docker versioning=docker
-          image: kong/kong-gateway:3.8
+          image: kong/kong-gateway:3.9
           env:
           - name: KONG_LOG_LEVEL
             value: debug
diff --git a/config/samples/dataplane-horizontal-autoscaling.yaml b/config/samples/dataplane-horizontal-autoscaling.yaml
index 71579973..2764e0bd 100644
--- a/config/samples/dataplane-horizontal-autoscaling.yaml
+++ b/config/samples/dataplane-horizontal-autoscaling.yaml
@@ -42,7 +42,7 @@ spec:
         containers:
         - name: proxy
           # renovate: datasource=docker versioning=docker
-          image: kong/kong-gateway:3.8
+          image: kong/kong-gateway:3.9
           env:
           - name: KONG_LOG_LEVEL
             value: debug
diff --git a/config/samples/dataplane-konnect-extension.yaml b/config/samples/dataplane-konnect-extension.yaml
index e798bd39..f42c1e8e 100644
--- a/config/samples/dataplane-konnect-extension.yaml
+++ b/config/samples/dataplane-konnect-extension.yaml
@@ -52,7 +52,7 @@ spec:
         containers:
         - name: proxy
           # renovate: datasource=docker versioning=docker
-          image: kong/kong-gateway:3.8
+          image: kong/kong-gateway:3.9
           readinessProbe:
             initialDelaySeconds: 1
             periodSeconds: 1
diff --git a/config/samples/dataplane-konnect.yaml b/config/samples/dataplane-konnect.yaml
index 99c0b34b..979e312e 100644
--- a/config/samples/dataplane-konnect.yaml
+++ b/config/samples/dataplane-konnect.yaml
@@ -35,7 +35,7 @@ spec:
         containers:
         - name: proxy
           # renovate: datasource=docker versioning=docker
-          image: kong/kong-gateway:3.8
+          image: kong/kong-gateway:3.9
           env:
             - name: KONG_ROLE
               value: data_plane
diff --git a/config/samples/dataplane-pdb.yaml b/config/samples/dataplane-pdb.yaml
index ca35bc4a..93fce066 100644
--- a/config/samples/dataplane-pdb.yaml
+++ b/config/samples/dataplane-pdb.yaml
@@ -14,7 +14,7 @@ spec:
         containers:
         - name: proxy
           # renovate: datasource=docker versioning=docker
-          image: kong/kong-gateway:3.8
+          image: kong/kong-gateway:3.9
           env:
           - name: KONG_LOG_LEVEL
             value: debug
diff --git a/config/samples/dataplane-sidecar.yaml b/config/samples/dataplane-sidecar.yaml
index 89076c5b..53c39b6f 100644
--- a/config/samples/dataplane-sidecar.yaml
+++ b/config/samples/dataplane-sidecar.yaml
@@ -46,7 +46,7 @@ spec:
             periodSeconds: 1
         - name: proxy
           # renovate: datasource=docker versioning=docker
-          image: kong/kong-gateway:3.8
+          image: kong/kong-gateway:3.9
           volumeMounts:
           - name: proxy-logs
             mountPath: /etc/kong/log/
diff --git a/config/samples/dataplane-with-custom-ports.yaml b/config/samples/dataplane-with-custom-ports.yaml
index d6e23a9f..4a813d64 100644
--- a/config/samples/dataplane-with-custom-ports.yaml
+++ b/config/samples/dataplane-with-custom-ports.yaml
@@ -14,7 +14,7 @@ spec:
         containers:
         - name: proxy
           # renovate: datasource=docker versioning=docker
-          image: kong/kong-gateway:3.8
+          image: kong/kong-gateway:3.9
           env:
           - name: KONG_LOG_LEVEL
             value: debug
diff --git a/config/samples/dataplane.yaml b/config/samples/dataplane.yaml
index 4b487129..4705e7ca 100644
--- a/config/samples/dataplane.yaml
+++ b/config/samples/dataplane.yaml
@@ -14,7 +14,7 @@ spec:
         containers:
         - name: proxy
           # renovate: datasource=docker versioning=docker
-          image: kong/kong-gateway:3.8
+          image: kong/kong-gateway:3.9
           env:
           - name: KONG_LOG_LEVEL
             value: debug
diff --git a/config/samples/gateway-httproute-allowedroutes.yaml b/config/samples/gateway-httproute-allowedroutes.yaml
index ad074938..966effd3 100644
--- a/config/samples/gateway-httproute-allowedroutes.yaml
+++ b/config/samples/gateway-httproute-allowedroutes.yaml
@@ -71,7 +71,7 @@ spec:
           containers:
           - name: proxy
             # renovate: datasource=docker versioning=docker
-            image: kong/kong-gateway:3.8
+            image: kong/kong-gateway:3.9
             readinessProbe:
               initialDelaySeconds: 1
               periodSeconds: 1
diff --git a/config/samples/gateway-httproute.yaml b/config/samples/gateway-httproute.yaml
index a9bee7c1..978a3ede 100644
--- a/config/samples/gateway-httproute.yaml
+++ b/config/samples/gateway-httproute.yaml
@@ -133,7 +133,7 @@ spec:
           containers:
           - name: proxy
             # renovate: datasource=docker versioning=docker
-            image: kong/kong-gateway:3.8
+            image: kong/kong-gateway:3.9
             readinessProbe:
               initialDelaySeconds: 1
               periodSeconds: 1
diff --git a/config/samples/gateway-kongplugininstallation-httproute.yaml b/config/samples/gateway-kongplugininstallation-httproute.yaml
index 68a6fd39..8b6d61f0 100644
--- a/config/samples/gateway-kongplugininstallation-httproute.yaml
+++ b/config/samples/gateway-kongplugininstallation-httproute.yaml
@@ -59,7 +59,7 @@ spec:
           containers:
             - name: proxy
               # renovate: datasource=docker versioning=docker
-              image: kong/kong-gateway:3.8
+              image: kong/kong-gateway:3.9
               readinessProbe:
                 initialDelaySeconds: 1
                 periodSeconds: 1
diff --git a/config/samples/gateway-with-disabled-controlplane-admission-webhook.yaml b/config/samples/gateway-with-disabled-controlplane-admission-webhook.yaml
index ab8cdca6..7adc4915 100644
--- a/config/samples/gateway-with-disabled-controlplane-admission-webhook.yaml
+++ b/config/samples/gateway-with-disabled-controlplane-admission-webhook.yaml
@@ -67,7 +67,7 @@ spec:
           containers:
           - name: proxy
             # renovate: datasource=docker versioning=docker
-            image: kong/kong-gateway:3.8
+            image: kong/kong-gateway:3.9
             readinessProbe:
               initialDelaySeconds: 1
               periodSeconds: 1
diff --git a/config/samples/gateway-with-gatewayconfiguration.yaml b/config/samples/gateway-with-gatewayconfiguration.yaml
index 71a26890..4c624a59 100644
--- a/config/samples/gateway-with-gatewayconfiguration.yaml
+++ b/config/samples/gateway-with-gatewayconfiguration.yaml
@@ -17,7 +17,7 @@ spec:
           containers:
           - name: proxy
             # renovate: datasource=docker versioning=docker
-            image: kong/kong-gateway:3.8
+            image: kong/kong-gateway:3.9
             readinessProbe:
               initialDelaySeconds: 1
               periodSeconds: 1
diff --git a/config/samples/gatewayconfiguration.yaml b/config/samples/gatewayconfiguration.yaml
index 804c43c7..458c0a14 100644
--- a/config/samples/gatewayconfiguration.yaml
+++ b/config/samples/gatewayconfiguration.yaml
@@ -17,7 +17,7 @@ spec:
           containers:
           - name: proxy
             # renovate: datasource=docker versioning=docker
-            image: kong/kong-gateway:3.8
+            image: kong/kong-gateway:3.9
             readinessProbe:
               initialDelaySeconds: 1
               periodSeconds: 1
diff --git a/pkg/consts/dataplane.go b/pkg/consts/dataplane.go
index 0e6e1bf7..2867f07c 100644
--- a/pkg/consts/dataplane.go
+++ b/pkg/consts/dataplane.go
@@ -87,7 +87,7 @@ const (
 	// DefaultDataPlaneTag is the base container image tag that can be used
 	// by default for a DataPlane resource if all other attempts to dynamically
 	// decide an image tag fail.
-	DefaultDataPlaneTag = "3.8" // renovate: datasource=docker depName=kong/kong-gateway
+	DefaultDataPlaneTag = "3.9" // renovate: datasource=docker depName=kong/kong-gateway
 
 	// DefaultDataPlaneImage is the default container image that can be used if
 	// all other attempts to dynamically decide the default image fail.