diff --git a/cluster/apps/system-upgrade/system-upgrade-controller/plans/agent.yaml b/cluster/apps/system-upgrade/system-upgrade-controller/plans/agent.yaml
index ae65528..e25b59d 100644
--- a/cluster/apps/system-upgrade/system-upgrade-controller/plans/agent.yaml
+++ b/cluster/apps/system-upgrade/system-upgrade-controller/plans/agent.yaml
@@ -10,7 +10,7 @@ spec:
   serviceAccountName: system-upgrade
   concurrency: 1
   # renovate: datasource=github-releases depName=k3s-io/k3s
-  version: "v1.25.3+k3s1"
+  version: "v1.25.4+k3s1"
   nodeSelector:
     matchExpressions:
       - key: node-role.kubernetes.io/master
diff --git a/cluster/apps/system-upgrade/system-upgrade-controller/plans/server.yaml b/cluster/apps/system-upgrade/system-upgrade-controller/plans/server.yaml
index ffbf7ea..a85787b 100644
--- a/cluster/apps/system-upgrade/system-upgrade-controller/plans/server.yaml
+++ b/cluster/apps/system-upgrade/system-upgrade-controller/plans/server.yaml
@@ -8,7 +8,7 @@ spec:
   serviceAccountName: system-upgrade
   concurrency: 1
   # renovate: datasource=github-releases depName=k3s-io/k3s
-  version: "v1.25.3+k3s1"
+  version: "v1.25.4+k3s1"
   cordon: true
   nodeSelector:
     matchExpressions:
diff --git a/provision/ansible/inventory/group_vars/kubernetes/k3s.yml b/provision/ansible/inventory/group_vars/kubernetes/k3s.yml
index 18cbd0c..ff11ba2 100644
--- a/provision/ansible/inventory/group_vars/kubernetes/k3s.yml
+++ b/provision/ansible/inventory/group_vars/kubernetes/k3s.yml
@@ -6,7 +6,7 @@
 
 # (string) Use a specific version of k3s
 # renovate: datasource=github-releases depName=k3s-io/k3s
-k3s_release_version: "v1.25.3+k3s1"
+k3s_release_version: "v1.25.4+k3s1"
 # (bool) Install using hard links rather than symbolic links.
 k3s_install_hard_links: true
 # (bool) Escalate user privileges for all tasks