diff --git a/kubernetes/berries/apps/system-upgrade/system-upgrade-controller/ks.yaml b/kubernetes/berries/apps/system-upgrade/system-upgrade-controller/ks.yaml
index 4f226dcf58..7d733f9f30 100644
--- a/kubernetes/berries/apps/system-upgrade/system-upgrade-controller/ks.yaml
+++ b/kubernetes/berries/apps/system-upgrade/system-upgrade-controller/ks.yaml
@@ -48,4 +48,4 @@ spec:
       # renovate: depName=ghcr.io/siderolabs/installer datasource=docker
       TALOS_VERSION: v1.8.4
       # renovate: depName=ghcr.io/siderolabs/kubelet datasource=docker
-      KUBERNETES_VERSION: v1.30.1
+      KUBERNETES_VERSION: v1.36.1
diff --git a/kubernetes/berries/bootstrap/talos/talconfig.yaml b/kubernetes/berries/bootstrap/talos/talconfig.yaml
index 0fda6d0ae8..703dfc508e 100644
--- a/kubernetes/berries/bootstrap/talos/talconfig.yaml
+++ b/kubernetes/berries/bootstrap/talos/talconfig.yaml
@@ -6,7 +6,7 @@ endpoint: https://${clusterEndpointIP}:6443
 # renovate: depName=ghcr.io/siderolabs/installer datasource=docker
 talosVersion: v1.7.7
 # renovate: depName=ghcr.io/siderolabs/kubelet datasource=docker
-kubernetesVersion: v1.30.1
+kubernetesVersion: v1.36.1
 
 cniConfig:
   name: none
diff --git a/kubernetes/subterra/bootstrap/talos/talconfig.yaml b/kubernetes/subterra/bootstrap/talos/talconfig.yaml
index d7e8ddfb64..fa596abedf 100644
--- a/kubernetes/subterra/bootstrap/talos/talconfig.yaml
+++ b/kubernetes/subterra/bootstrap/talos/talconfig.yaml
@@ -6,7 +6,7 @@ endpoint: https://${clusterEndpointIP}:6443
 # renovate: depName=ghcr.io/siderolabs/installer datasource=docker
 talosVersion: v1.7.7
 # renovate: depName=ghcr.io/siderolabs/kubelet datasource=docker
-kubernetesVersion: v1.30.8
+kubernetesVersion: v1.36.1
 allowSchedulingOnMasters: true
 cniConfig:
   name: none