diff --git a/eng/pipeline/stages/build-test-publish-repo.yml b/eng/pipeline/stages/build-test-publish-repo.yml
index b0dde956..2e6367a3 100644
--- a/eng/pipeline/stages/build-test-publish-repo.yml
+++ b/eng/pipeline/stages/build-test-publish-repo.yml
@@ -9,6 +9,7 @@ stages:
       noCache: true
       # Template paths must be relative to the YAML job that executes them
       customBuildInitSteps:
+        - template: ../../../pipeline/steps/set-imagebuilder-build-args-var.yml
         - template: ../../../pipeline/steps/set-public-source-branch-var.yml
       customPublishInitSteps:
         - template: ../../../pipeline/steps/set-public-source-branch-var.yml
diff --git a/eng/pipeline/steps/set-imagebuilder-build-args-var.yml b/eng/pipeline/steps/set-imagebuilder-build-args-var.yml
new file mode 100644
index 00000000..cf595620
--- /dev/null
+++ b/eng/pipeline/steps/set-imagebuilder-build-args-var.yml
@@ -0,0 +1,14 @@
+# This is a copy of https://github.com/dotnet/dotnet-docker/blob/4e1b99dc7c62a3f4833a17b5a5ea298ae57b445b/eng/pipelines/steps/set-imagebuilder-build-args-var.yml
+# Skipping validation lets us avoid build breaks when Mariner changes how the platform is represented:
+# - https://github.com/microsoft/CBL-Mariner/issues/5008
+# - https://github.com/microsoft/CBL-Mariner/issues/4856
+steps:
+- powershell: |
+    $imageBuilderBuildArgs = $env:IMAGEBUILDERBUILDARGS
+    # Disable platform checks for CBL-Mariner on ARM64 due to https://github.com/dotnet/dotnet-docker/issues/3520
+    if ("$(osVersions)".Contains("cbl-mariner") -and "$(architecture)" -eq "arm64") {
+      $imageBuilderBuildArgs += " --skip-platform-check"
+    }
+
+    echo "##vso[task.setvariable variable=imageBuilderBuildArgs]$imageBuilderBuildArgs"
+  displayName: Set Custom ImageBuilder Build Args
\ No newline at end of file
diff --git a/manifest.json b/manifest.json
index 89eb80cc..be12aab2 100644
--- a/manifest.json
+++ b/manifest.json
@@ -17,10 +17,10 @@
             "1-bullseye": {},
             "1.19": {},
             "1.19-bullseye": {},
-            "1.19.6": {},
-            "1.19.6-1": {},
-            "1.19.6-1-bullseye": {},
-            "1.19.6-bullseye": {},
+            "1.19.7": {},
+            "1.19.7-1": {},
+            "1.19.7-1-bullseye": {},
+            "1.19.7-bullseye": {},
             "bullseye": {},
             "latest": {}
           },
@@ -31,7 +31,7 @@
               "os": "linux",
               "osVersion": "bullseye",
               "tags": {
-                "1.19.6-1-bullseye-amd64": {}
+                "1.19.7-1-bullseye-amd64": {}
               }
             },
             {
@@ -41,7 +41,7 @@
               "os": "linux",
               "osVersion": "bullseye",
               "tags": {
-                "1.19.6-1-bullseye-arm64v8": {}
+                "1.19.7-1-bullseye-arm64v8": {}
               }
             },
             {
@@ -51,7 +51,7 @@
               "os": "linux",
               "osVersion": "bullseye",
               "tags": {
-                "1.19.6-1-bullseye-arm32v7": {}
+                "1.19.7-1-bullseye-arm32v7": {}
               }
             }
           ]
@@ -61,8 +61,8 @@
           "sharedTags": {
             "1-buster": {},
             "1.19-buster": {},
-            "1.19.6-1-buster": {},
-            "1.19.6-buster": {},
+            "1.19.7-1-buster": {},
+            "1.19.7-buster": {},
             "buster": {}
           },
           "platforms": [
@@ -72,7 +72,7 @@
               "os": "linux",
               "osVersion": "buster",
               "tags": {
-                "1.19.6-1-buster-amd64": {}
+                "1.19.7-1-buster-amd64": {}
               }
             },
             {
@@ -82,7 +82,7 @@
               "os": "linux",
               "osVersion": "buster",
               "tags": {
-                "1.19.6-1-buster-arm64v8": {}
+                "1.19.7-1-buster-arm64v8": {}
               }
             },
             {
@@ -92,7 +92,7 @@
               "os": "linux",
               "osVersion": "buster",
               "tags": {
-                "1.19.6-1-buster-arm32v7": {}
+                "1.19.7-1-buster-arm32v7": {}
               }
             }
           ]
@@ -102,8 +102,8 @@
           "sharedTags": {
             "1-cbl-mariner1.0": {},
             "1.19-cbl-mariner1.0": {},
-            "1.19.6-1-cbl-mariner1.0": {},
-            "1.19.6-cbl-mariner1.0": {},
+            "1.19.7-1-cbl-mariner1.0": {},
+            "1.19.7-cbl-mariner1.0": {},
             "cbl-mariner1.0": {}
           },
           "platforms": [
@@ -113,7 +113,7 @@
               "os": "linux",
               "osVersion": "cbl-mariner1.0",
               "tags": {
-                "1.19.6-1-cbl-mariner1.0-amd64": {}
+                "1.19.7-1-cbl-mariner1.0-amd64": {}
               }
             },
             {
@@ -123,7 +123,7 @@
               "os": "linux",
               "osVersion": "cbl-mariner1.0",
               "tags": {
-                "1.19.6-1-cbl-mariner1.0-arm64v8": {}
+                "1.19.7-1-cbl-mariner1.0-arm64v8": {}
               }
             }
           ]
@@ -133,8 +133,8 @@
           "sharedTags": {
             "1-cbl-mariner2.0": {},
             "1.19-cbl-mariner2.0": {},
-            "1.19.6-1-cbl-mariner2.0": {},
-            "1.19.6-cbl-mariner2.0": {},
+            "1.19.7-1-cbl-mariner2.0": {},
+            "1.19.7-cbl-mariner2.0": {},
             "cbl-mariner2.0": {}
           },
           "platforms": [
@@ -144,7 +144,7 @@
               "os": "linux",
               "osVersion": "cbl-mariner2.0",
               "tags": {
-                "1.19.6-1-cbl-mariner2.0-amd64": {}
+                "1.19.7-1-cbl-mariner2.0-amd64": {}
               }
             },
             {
@@ -154,7 +154,7 @@
               "os": "linux",
               "osVersion": "cbl-mariner2.0",
               "tags": {
-                "1.19.6-1-cbl-mariner2.0-arm64v8": {}
+                "1.19.7-1-cbl-mariner2.0-arm64v8": {}
               }
             }
           ]
@@ -164,14 +164,14 @@
           "sharedTags": {
             "1-fips-bullseye": {},
             "1.19-fips-bullseye": {},
-            "1.19.6-1-fips-bullseye": {},
-            "1.19.6-fips-bullseye": {},
+            "1.19.7-1-fips-bullseye": {},
+            "1.19.7-fips-bullseye": {},
             "fips-bullseye": {}
           },
           "platforms": [
             {
               "buildArgs": {
-                "FROM_TAG": "1.19.6-1-bullseye-amd64",
+                "FROM_TAG": "1.19.7-1-bullseye-amd64",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "amd64",
@@ -179,12 +179,12 @@
               "os": "linux",
               "osVersion": "bullseye",
               "tags": {
-                "1.19.6-1-fips-bullseye-amd64": {}
+                "1.19.7-1-fips-bullseye-amd64": {}
               }
             },
             {
               "buildArgs": {
-                "FROM_TAG": "1.19.6-1-bullseye-arm64v8",
+                "FROM_TAG": "1.19.7-1-bullseye-arm64v8",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "arm64",
@@ -193,12 +193,12 @@
               "os": "linux",
               "osVersion": "bullseye",
               "tags": {
-                "1.19.6-1-fips-bullseye-arm64v8": {}
+                "1.19.7-1-fips-bullseye-arm64v8": {}
               }
             },
             {
               "buildArgs": {
-                "FROM_TAG": "1.19.6-1-bullseye-arm32v7",
+                "FROM_TAG": "1.19.7-1-bullseye-arm32v7",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "arm",
@@ -207,7 +207,7 @@
               "os": "linux",
               "osVersion": "bullseye",
               "tags": {
-                "1.19.6-1-fips-bullseye-arm32v7": {}
+                "1.19.7-1-fips-bullseye-arm32v7": {}
               }
             }
           ]
@@ -217,14 +217,14 @@
           "sharedTags": {
             "1-fips-buster": {},
             "1.19-fips-buster": {},
-            "1.19.6-1-fips-buster": {},
-            "1.19.6-fips-buster": {},
+            "1.19.7-1-fips-buster": {},
+            "1.19.7-fips-buster": {},
             "fips-buster": {}
           },
           "platforms": [
             {
               "buildArgs": {
-                "FROM_TAG": "1.19.6-1-buster-amd64",
+                "FROM_TAG": "1.19.7-1-buster-amd64",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "amd64",
@@ -232,12 +232,12 @@
               "os": "linux",
               "osVersion": "buster",
               "tags": {
-                "1.19.6-1-fips-buster-amd64": {}
+                "1.19.7-1-fips-buster-amd64": {}
               }
             },
             {
               "buildArgs": {
-                "FROM_TAG": "1.19.6-1-buster-arm64v8",
+                "FROM_TAG": "1.19.7-1-buster-arm64v8",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "arm64",
@@ -246,12 +246,12 @@
               "os": "linux",
               "osVersion": "buster",
               "tags": {
-                "1.19.6-1-fips-buster-arm64v8": {}
+                "1.19.7-1-fips-buster-arm64v8": {}
               }
             },
             {
               "buildArgs": {
-                "FROM_TAG": "1.19.6-1-buster-arm32v7",
+                "FROM_TAG": "1.19.7-1-buster-arm32v7",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "arm",
@@ -260,7 +260,7 @@
               "os": "linux",
               "osVersion": "buster",
               "tags": {
-                "1.19.6-1-fips-buster-arm32v7": {}
+                "1.19.7-1-fips-buster-arm32v7": {}
               }
             }
           ]
@@ -270,14 +270,14 @@
           "sharedTags": {
             "1-fips-cbl-mariner1.0": {},
             "1.19-fips-cbl-mariner1.0": {},
-            "1.19.6-1-fips-cbl-mariner1.0": {},
-            "1.19.6-fips-cbl-mariner1.0": {},
+            "1.19.7-1-fips-cbl-mariner1.0": {},
+            "1.19.7-fips-cbl-mariner1.0": {},
             "fips-cbl-mariner1.0": {}
           },
           "platforms": [
             {
               "buildArgs": {
-                "FROM_TAG": "1.19.6-1-cbl-mariner1.0-amd64",
+                "FROM_TAG": "1.19.7-1-cbl-mariner1.0-amd64",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "amd64",
@@ -285,12 +285,12 @@
               "os": "linux",
               "osVersion": "cbl-mariner1.0",
               "tags": {
-                "1.19.6-1-fips-cbl-mariner1.0-amd64": {}
+                "1.19.7-1-fips-cbl-mariner1.0-amd64": {}
               }
             },
             {
               "buildArgs": {
-                "FROM_TAG": "1.19.6-1-cbl-mariner1.0-arm64v8",
+                "FROM_TAG": "1.19.7-1-cbl-mariner1.0-arm64v8",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "arm64",
@@ -299,7 +299,7 @@
               "os": "linux",
               "osVersion": "cbl-mariner1.0",
               "tags": {
-                "1.19.6-1-fips-cbl-mariner1.0-arm64v8": {}
+                "1.19.7-1-fips-cbl-mariner1.0-arm64v8": {}
               }
             }
           ]
@@ -309,14 +309,14 @@
           "sharedTags": {
             "1-fips-cbl-mariner2.0": {},
             "1.19-fips-cbl-mariner2.0": {},
-            "1.19.6-1-fips-cbl-mariner2.0": {},
-            "1.19.6-fips-cbl-mariner2.0": {},
+            "1.19.7-1-fips-cbl-mariner2.0": {},
+            "1.19.7-fips-cbl-mariner2.0": {},
             "fips-cbl-mariner2.0": {}
           },
           "platforms": [
             {
               "buildArgs": {
-                "FROM_TAG": "1.19.6-1-cbl-mariner2.0-amd64",
+                "FROM_TAG": "1.19.7-1-cbl-mariner2.0-amd64",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "amd64",
@@ -324,12 +324,12 @@
               "os": "linux",
               "osVersion": "cbl-mariner2.0",
               "tags": {
-                "1.19.6-1-fips-cbl-mariner2.0-amd64": {}
+                "1.19.7-1-fips-cbl-mariner2.0-amd64": {}
               }
             },
             {
               "buildArgs": {
-                "FROM_TAG": "1.19.6-1-cbl-mariner2.0-arm64v8",
+                "FROM_TAG": "1.19.7-1-cbl-mariner2.0-arm64v8",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "arm64",
@@ -338,7 +338,7 @@
               "os": "linux",
               "osVersion": "cbl-mariner2.0",
               "tags": {
-                "1.19.6-1-fips-cbl-mariner2.0-arm64v8": {}
+                "1.19.7-1-fips-cbl-mariner2.0-arm64v8": {}
               }
             }
           ]
@@ -348,8 +348,8 @@
           "sharedTags": {
             "1-windowsservercore-ltsc2022": {},
             "1.19-windowsservercore-ltsc2022": {},
-            "1.19.6-1-windowsservercore-ltsc2022": {},
-            "1.19.6-windowsservercore-ltsc2022": {},
+            "1.19.7-1-windowsservercore-ltsc2022": {},
+            "1.19.7-windowsservercore-ltsc2022": {},
             "windowsservercore-ltsc2022": {}
           },
           "platforms": [
@@ -359,7 +359,7 @@
               "os": "windows",
               "osVersion": "windowsservercore-ltsc2022",
               "tags": {
-                "1.19.6-1-windowsservercore-ltsc2022-amd64": {}
+                "1.19.7-1-windowsservercore-ltsc2022-amd64": {}
               }
             }
           ]
@@ -369,8 +369,8 @@
           "sharedTags": {
             "1-windowsservercore-1809": {},
             "1.19-windowsservercore-1809": {},
-            "1.19.6-1-windowsservercore-1809": {},
-            "1.19.6-windowsservercore-1809": {},
+            "1.19.7-1-windowsservercore-1809": {},
+            "1.19.7-windowsservercore-1809": {},
             "windowsservercore-1809": {}
           },
           "platforms": [
@@ -380,7 +380,7 @@
               "os": "windows",
               "osVersion": "windowsservercore-1809",
               "tags": {
-                "1.19.6-1-windowsservercore-1809-amd64": {}
+                "1.19.7-1-windowsservercore-1809-amd64": {}
               }
             }
           ]
@@ -390,8 +390,8 @@
           "sharedTags": {
             "1-windowsservercore-ltsc2016": {},
             "1.19-windowsservercore-ltsc2016": {},
-            "1.19.6-1-windowsservercore-ltsc2016": {},
-            "1.19.6-windowsservercore-ltsc2016": {},
+            "1.19.7-1-windowsservercore-ltsc2016": {},
+            "1.19.7-windowsservercore-ltsc2016": {},
             "windowsservercore-ltsc2016": {}
           },
           "platforms": [
@@ -401,7 +401,7 @@
               "os": "windows",
               "osVersion": "windowsservercore-ltsc2016",
               "tags": {
-                "1.19.6-1-windowsservercore-ltsc2016-amd64": {}
+                "1.19.7-1-windowsservercore-ltsc2016-amd64": {}
               }
             }
           ]
@@ -411,14 +411,14 @@
           "sharedTags": {
             "1-nanoserver-ltsc2022": {},
             "1.19-nanoserver-ltsc2022": {},
-            "1.19.6-1-nanoserver-ltsc2022": {},
-            "1.19.6-nanoserver-ltsc2022": {},
+            "1.19.7-1-nanoserver-ltsc2022": {},
+            "1.19.7-nanoserver-ltsc2022": {},
             "nanoserver-ltsc2022": {}
           },
           "platforms": [
             {
               "buildArgs": {
-                "DOWNLOADER_TAG": "1.19.6-1-windowsservercore-ltsc2022-amd64",
+                "DOWNLOADER_TAG": "1.19.7-1-windowsservercore-ltsc2022-amd64",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "amd64",
@@ -426,7 +426,7 @@
               "os": "windows",
               "osVersion": "nanoserver-ltsc2022",
               "tags": {
-                "1.19.6-1-nanoserver-ltsc2022-amd64": {}
+                "1.19.7-1-nanoserver-ltsc2022-amd64": {}
               }
             }
           ]
@@ -436,14 +436,14 @@
           "sharedTags": {
             "1-nanoserver-1809": {},
             "1.19-nanoserver-1809": {},
-            "1.19.6-1-nanoserver-1809": {},
-            "1.19.6-nanoserver-1809": {},
+            "1.19.7-1-nanoserver-1809": {},
+            "1.19.7-nanoserver-1809": {},
             "nanoserver-1809": {}
           },
           "platforms": [
             {
               "buildArgs": {
-                "DOWNLOADER_TAG": "1.19.6-1-windowsservercore-1809-amd64",
+                "DOWNLOADER_TAG": "1.19.7-1-windowsservercore-1809-amd64",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "amd64",
@@ -451,7 +451,7 @@
               "os": "windows",
               "osVersion": "nanoserver-1809",
               "tags": {
-                "1.19.6-1-nanoserver-1809-amd64": {}
+                "1.19.7-1-nanoserver-1809-amd64": {}
               }
             }
           ]
@@ -461,10 +461,10 @@
           "sharedTags": {
             "1.20": {},
             "1.20-bullseye": {},
-            "1.20.1": {},
-            "1.20.1-1": {},
-            "1.20.1-1-bullseye": {},
-            "1.20.1-bullseye": {}
+            "1.20.2": {},
+            "1.20.2-1": {},
+            "1.20.2-1-bullseye": {},
+            "1.20.2-bullseye": {}
           },
           "platforms": [
             {
@@ -473,7 +473,7 @@
               "os": "linux",
               "osVersion": "bullseye",
               "tags": {
-                "1.20.1-1-bullseye-amd64": {}
+                "1.20.2-1-bullseye-amd64": {}
               }
             },
             {
@@ -483,7 +483,7 @@
               "os": "linux",
               "osVersion": "bullseye",
               "tags": {
-                "1.20.1-1-bullseye-arm64v8": {}
+                "1.20.2-1-bullseye-arm64v8": {}
               }
             },
             {
@@ -493,7 +493,7 @@
               "os": "linux",
               "osVersion": "bullseye",
               "tags": {
-                "1.20.1-1-bullseye-arm32v7": {}
+                "1.20.2-1-bullseye-arm32v7": {}
               }
             }
           ]
@@ -502,8 +502,8 @@
           "productVersion": "1.20",
           "sharedTags": {
             "1.20-buster": {},
-            "1.20.1-1-buster": {},
-            "1.20.1-buster": {}
+            "1.20.2-1-buster": {},
+            "1.20.2-buster": {}
           },
           "platforms": [
             {
@@ -512,7 +512,7 @@
               "os": "linux",
               "osVersion": "buster",
               "tags": {
-                "1.20.1-1-buster-amd64": {}
+                "1.20.2-1-buster-amd64": {}
               }
             },
             {
@@ -522,7 +522,7 @@
               "os": "linux",
               "osVersion": "buster",
               "tags": {
-                "1.20.1-1-buster-arm64v8": {}
+                "1.20.2-1-buster-arm64v8": {}
               }
             },
             {
@@ -532,7 +532,7 @@
               "os": "linux",
               "osVersion": "buster",
               "tags": {
-                "1.20.1-1-buster-arm32v7": {}
+                "1.20.2-1-buster-arm32v7": {}
               }
             }
           ]
@@ -541,8 +541,8 @@
           "productVersion": "1.20",
           "sharedTags": {
             "1.20-cbl-mariner1.0": {},
-            "1.20.1-1-cbl-mariner1.0": {},
-            "1.20.1-cbl-mariner1.0": {}
+            "1.20.2-1-cbl-mariner1.0": {},
+            "1.20.2-cbl-mariner1.0": {}
           },
           "platforms": [
             {
@@ -551,7 +551,7 @@
               "os": "linux",
               "osVersion": "cbl-mariner1.0",
               "tags": {
-                "1.20.1-1-cbl-mariner1.0-amd64": {}
+                "1.20.2-1-cbl-mariner1.0-amd64": {}
               }
             },
             {
@@ -561,7 +561,7 @@
               "os": "linux",
               "osVersion": "cbl-mariner1.0",
               "tags": {
-                "1.20.1-1-cbl-mariner1.0-arm64v8": {}
+                "1.20.2-1-cbl-mariner1.0-arm64v8": {}
               }
             }
           ]
@@ -570,8 +570,8 @@
           "productVersion": "1.20",
           "sharedTags": {
             "1.20-cbl-mariner2.0": {},
-            "1.20.1-1-cbl-mariner2.0": {},
-            "1.20.1-cbl-mariner2.0": {}
+            "1.20.2-1-cbl-mariner2.0": {},
+            "1.20.2-cbl-mariner2.0": {}
           },
           "platforms": [
             {
@@ -580,7 +580,7 @@
               "os": "linux",
               "osVersion": "cbl-mariner2.0",
               "tags": {
-                "1.20.1-1-cbl-mariner2.0-amd64": {}
+                "1.20.2-1-cbl-mariner2.0-amd64": {}
               }
             },
             {
@@ -590,7 +590,7 @@
               "os": "linux",
               "osVersion": "cbl-mariner2.0",
               "tags": {
-                "1.20.1-1-cbl-mariner2.0-arm64v8": {}
+                "1.20.2-1-cbl-mariner2.0-arm64v8": {}
               }
             }
           ]
@@ -599,13 +599,13 @@
           "productVersion": "1.20",
           "sharedTags": {
             "1.20-fips-bullseye": {},
-            "1.20.1-1-fips-bullseye": {},
-            "1.20.1-fips-bullseye": {}
+            "1.20.2-1-fips-bullseye": {},
+            "1.20.2-fips-bullseye": {}
           },
           "platforms": [
             {
               "buildArgs": {
-                "FROM_TAG": "1.20.1-1-bullseye-amd64",
+                "FROM_TAG": "1.20.2-1-bullseye-amd64",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "amd64",
@@ -613,12 +613,12 @@
               "os": "linux",
               "osVersion": "bullseye",
               "tags": {
-                "1.20.1-1-fips-bullseye-amd64": {}
+                "1.20.2-1-fips-bullseye-amd64": {}
               }
             },
             {
               "buildArgs": {
-                "FROM_TAG": "1.20.1-1-bullseye-arm64v8",
+                "FROM_TAG": "1.20.2-1-bullseye-arm64v8",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "arm64",
@@ -627,12 +627,12 @@
               "os": "linux",
               "osVersion": "bullseye",
               "tags": {
-                "1.20.1-1-fips-bullseye-arm64v8": {}
+                "1.20.2-1-fips-bullseye-arm64v8": {}
               }
             },
             {
               "buildArgs": {
-                "FROM_TAG": "1.20.1-1-bullseye-arm32v7",
+                "FROM_TAG": "1.20.2-1-bullseye-arm32v7",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "arm",
@@ -641,7 +641,7 @@
               "os": "linux",
               "osVersion": "bullseye",
               "tags": {
-                "1.20.1-1-fips-bullseye-arm32v7": {}
+                "1.20.2-1-fips-bullseye-arm32v7": {}
               }
             }
           ]
@@ -650,13 +650,13 @@
           "productVersion": "1.20",
           "sharedTags": {
             "1.20-fips-buster": {},
-            "1.20.1-1-fips-buster": {},
-            "1.20.1-fips-buster": {}
+            "1.20.2-1-fips-buster": {},
+            "1.20.2-fips-buster": {}
           },
           "platforms": [
             {
               "buildArgs": {
-                "FROM_TAG": "1.20.1-1-buster-amd64",
+                "FROM_TAG": "1.20.2-1-buster-amd64",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "amd64",
@@ -664,12 +664,12 @@
               "os": "linux",
               "osVersion": "buster",
               "tags": {
-                "1.20.1-1-fips-buster-amd64": {}
+                "1.20.2-1-fips-buster-amd64": {}
               }
             },
             {
               "buildArgs": {
-                "FROM_TAG": "1.20.1-1-buster-arm64v8",
+                "FROM_TAG": "1.20.2-1-buster-arm64v8",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "arm64",
@@ -678,12 +678,12 @@
               "os": "linux",
               "osVersion": "buster",
               "tags": {
-                "1.20.1-1-fips-buster-arm64v8": {}
+                "1.20.2-1-fips-buster-arm64v8": {}
               }
             },
             {
               "buildArgs": {
-                "FROM_TAG": "1.20.1-1-buster-arm32v7",
+                "FROM_TAG": "1.20.2-1-buster-arm32v7",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "arm",
@@ -692,7 +692,7 @@
               "os": "linux",
               "osVersion": "buster",
               "tags": {
-                "1.20.1-1-fips-buster-arm32v7": {}
+                "1.20.2-1-fips-buster-arm32v7": {}
               }
             }
           ]
@@ -701,13 +701,13 @@
           "productVersion": "1.20",
           "sharedTags": {
             "1.20-fips-cbl-mariner1.0": {},
-            "1.20.1-1-fips-cbl-mariner1.0": {},
-            "1.20.1-fips-cbl-mariner1.0": {}
+            "1.20.2-1-fips-cbl-mariner1.0": {},
+            "1.20.2-fips-cbl-mariner1.0": {}
           },
           "platforms": [
             {
               "buildArgs": {
-                "FROM_TAG": "1.20.1-1-cbl-mariner1.0-amd64",
+                "FROM_TAG": "1.20.2-1-cbl-mariner1.0-amd64",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "amd64",
@@ -715,12 +715,12 @@
               "os": "linux",
               "osVersion": "cbl-mariner1.0",
               "tags": {
-                "1.20.1-1-fips-cbl-mariner1.0-amd64": {}
+                "1.20.2-1-fips-cbl-mariner1.0-amd64": {}
               }
             },
             {
               "buildArgs": {
-                "FROM_TAG": "1.20.1-1-cbl-mariner1.0-arm64v8",
+                "FROM_TAG": "1.20.2-1-cbl-mariner1.0-arm64v8",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "arm64",
@@ -729,7 +729,7 @@
               "os": "linux",
               "osVersion": "cbl-mariner1.0",
               "tags": {
-                "1.20.1-1-fips-cbl-mariner1.0-arm64v8": {}
+                "1.20.2-1-fips-cbl-mariner1.0-arm64v8": {}
               }
             }
           ]
@@ -738,13 +738,13 @@
           "productVersion": "1.20",
           "sharedTags": {
             "1.20-fips-cbl-mariner2.0": {},
-            "1.20.1-1-fips-cbl-mariner2.0": {},
-            "1.20.1-fips-cbl-mariner2.0": {}
+            "1.20.2-1-fips-cbl-mariner2.0": {},
+            "1.20.2-fips-cbl-mariner2.0": {}
           },
           "platforms": [
             {
               "buildArgs": {
-                "FROM_TAG": "1.20.1-1-cbl-mariner2.0-amd64",
+                "FROM_TAG": "1.20.2-1-cbl-mariner2.0-amd64",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "amd64",
@@ -752,12 +752,12 @@
               "os": "linux",
               "osVersion": "cbl-mariner2.0",
               "tags": {
-                "1.20.1-1-fips-cbl-mariner2.0-amd64": {}
+                "1.20.2-1-fips-cbl-mariner2.0-amd64": {}
               }
             },
             {
               "buildArgs": {
-                "FROM_TAG": "1.20.1-1-cbl-mariner2.0-arm64v8",
+                "FROM_TAG": "1.20.2-1-cbl-mariner2.0-arm64v8",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "arm64",
@@ -766,7 +766,7 @@
               "os": "linux",
               "osVersion": "cbl-mariner2.0",
               "tags": {
-                "1.20.1-1-fips-cbl-mariner2.0-arm64v8": {}
+                "1.20.2-1-fips-cbl-mariner2.0-arm64v8": {}
               }
             }
           ]
@@ -775,8 +775,8 @@
           "productVersion": "1.20",
           "sharedTags": {
             "1.20-windowsservercore-ltsc2022": {},
-            "1.20.1-1-windowsservercore-ltsc2022": {},
-            "1.20.1-windowsservercore-ltsc2022": {}
+            "1.20.2-1-windowsservercore-ltsc2022": {},
+            "1.20.2-windowsservercore-ltsc2022": {}
           },
           "platforms": [
             {
@@ -785,7 +785,7 @@
               "os": "windows",
               "osVersion": "windowsservercore-ltsc2022",
               "tags": {
-                "1.20.1-1-windowsservercore-ltsc2022-amd64": {}
+                "1.20.2-1-windowsservercore-ltsc2022-amd64": {}
               }
             }
           ]
@@ -794,8 +794,8 @@
           "productVersion": "1.20",
           "sharedTags": {
             "1.20-windowsservercore-1809": {},
-            "1.20.1-1-windowsservercore-1809": {},
-            "1.20.1-windowsservercore-1809": {}
+            "1.20.2-1-windowsservercore-1809": {},
+            "1.20.2-windowsservercore-1809": {}
           },
           "platforms": [
             {
@@ -804,7 +804,7 @@
               "os": "windows",
               "osVersion": "windowsservercore-1809",
               "tags": {
-                "1.20.1-1-windowsservercore-1809-amd64": {}
+                "1.20.2-1-windowsservercore-1809-amd64": {}
               }
             }
           ]
@@ -813,8 +813,8 @@
           "productVersion": "1.20",
           "sharedTags": {
             "1.20-windowsservercore-ltsc2016": {},
-            "1.20.1-1-windowsservercore-ltsc2016": {},
-            "1.20.1-windowsservercore-ltsc2016": {}
+            "1.20.2-1-windowsservercore-ltsc2016": {},
+            "1.20.2-windowsservercore-ltsc2016": {}
           },
           "platforms": [
             {
@@ -823,7 +823,7 @@
               "os": "windows",
               "osVersion": "windowsservercore-ltsc2016",
               "tags": {
-                "1.20.1-1-windowsservercore-ltsc2016-amd64": {}
+                "1.20.2-1-windowsservercore-ltsc2016-amd64": {}
               }
             }
           ]
@@ -832,13 +832,13 @@
           "productVersion": "1.20",
           "sharedTags": {
             "1.20-nanoserver-ltsc2022": {},
-            "1.20.1-1-nanoserver-ltsc2022": {},
-            "1.20.1-nanoserver-ltsc2022": {}
+            "1.20.2-1-nanoserver-ltsc2022": {},
+            "1.20.2-nanoserver-ltsc2022": {}
           },
           "platforms": [
             {
               "buildArgs": {
-                "DOWNLOADER_TAG": "1.20.1-1-windowsservercore-ltsc2022-amd64",
+                "DOWNLOADER_TAG": "1.20.2-1-windowsservercore-ltsc2022-amd64",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "amd64",
@@ -846,7 +846,7 @@
               "os": "windows",
               "osVersion": "nanoserver-ltsc2022",
               "tags": {
-                "1.20.1-1-nanoserver-ltsc2022-amd64": {}
+                "1.20.2-1-nanoserver-ltsc2022-amd64": {}
               }
             }
           ]
@@ -855,13 +855,13 @@
           "productVersion": "1.20",
           "sharedTags": {
             "1.20-nanoserver-1809": {},
-            "1.20.1-1-nanoserver-1809": {},
-            "1.20.1-nanoserver-1809": {}
+            "1.20.2-1-nanoserver-1809": {},
+            "1.20.2-nanoserver-1809": {}
           },
           "platforms": [
             {
               "buildArgs": {
-                "DOWNLOADER_TAG": "1.20.1-1-windowsservercore-1809-amd64",
+                "DOWNLOADER_TAG": "1.20.2-1-windowsservercore-1809-amd64",
                 "REPO": "$(Repo:golang)"
               },
               "architecture": "amd64",
@@ -869,7 +869,7 @@
               "os": "windows",
               "osVersion": "nanoserver-1809",
               "tags": {
-                "1.20.1-1-nanoserver-1809-amd64": {}
+                "1.20.2-1-nanoserver-1809-amd64": {}
               }
             }
           ]
diff --git a/src/microsoft/1.19/bullseye/Dockerfile b/src/microsoft/1.19/bullseye/Dockerfile
index 379bdaae..b802bb23 100644
--- a/src/microsoft/1.19/bullseye/Dockerfile
+++ b/src/microsoft/1.19/bullseye/Dockerfile
@@ -20,23 +20,23 @@ RUN set -eux; \
 
 ENV PATH /usr/local/go/bin:$PATH
 
-ENV GOLANG_VERSION 1.19.6
+ENV GOLANG_VERSION 1.19.7
 
 RUN set -eux; \
 	arch="$(dpkg --print-architecture)"; arch="${arch##*-}"; \
 	url=; \
 	case "$arch" in \
 		'amd64') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230214.2/go.20230214.2.linux-amd64.tar.gz'; \
-			sha256='2334a3f31ff12a89231efa9d21bd537c3054e62ed28596a08c73aef2993f455e'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230307.2/go.20230307.2.linux-amd64.tar.gz'; \
+			sha256='babbb898f7dce7f4725b4bef05594fc658d541ba0c324dc38f75a8ca489732de'; \
 			;; \
 		'armhf') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230214.2/go.20230214.2.linux-armv6l.tar.gz'; \
-			sha256='1491d6c59d193c3a37feeddf314b52807ca81113492c01b41951cc18d2d3666c'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230307.2/go.20230307.2.linux-armv6l.tar.gz'; \
+			sha256='dc31f6577b6172635ec95d1241e6494439fb3d1b50ce316520d2dc6b4e82d536'; \
 			;; \
 		'arm64') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230214.2/go.20230214.2.linux-arm64.tar.gz'; \
-			sha256='0774e6966b20dc7a4a088a33b6e7b84553d59f5484c6b353bab2790456768661'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230307.2/go.20230307.2.linux-arm64.tar.gz'; \
+			sha256='4d73984fda371b60808f88516528521751214a6c9af96db6387cbb05c2afd5a4'; \
 			;; \
 		*) echo >&2 "error: unsupported architecture '$arch' (likely packaging update needed)"; exit 1 ;; \
 	esac; \
diff --git a/src/microsoft/1.19/buster/Dockerfile b/src/microsoft/1.19/buster/Dockerfile
index 0326c79b..1523f069 100644
--- a/src/microsoft/1.19/buster/Dockerfile
+++ b/src/microsoft/1.19/buster/Dockerfile
@@ -20,23 +20,23 @@ RUN set -eux; \
 
 ENV PATH /usr/local/go/bin:$PATH
 
-ENV GOLANG_VERSION 1.19.6
+ENV GOLANG_VERSION 1.19.7
 
 RUN set -eux; \
 	arch="$(dpkg --print-architecture)"; arch="${arch##*-}"; \
 	url=; \
 	case "$arch" in \
 		'amd64') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230214.2/go.20230214.2.linux-amd64.tar.gz'; \
-			sha256='2334a3f31ff12a89231efa9d21bd537c3054e62ed28596a08c73aef2993f455e'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230307.2/go.20230307.2.linux-amd64.tar.gz'; \
+			sha256='babbb898f7dce7f4725b4bef05594fc658d541ba0c324dc38f75a8ca489732de'; \
 			;; \
 		'armhf') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230214.2/go.20230214.2.linux-armv6l.tar.gz'; \
-			sha256='1491d6c59d193c3a37feeddf314b52807ca81113492c01b41951cc18d2d3666c'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230307.2/go.20230307.2.linux-armv6l.tar.gz'; \
+			sha256='dc31f6577b6172635ec95d1241e6494439fb3d1b50ce316520d2dc6b4e82d536'; \
 			;; \
 		'arm64') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230214.2/go.20230214.2.linux-arm64.tar.gz'; \
-			sha256='0774e6966b20dc7a4a088a33b6e7b84553d59f5484c6b353bab2790456768661'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230307.2/go.20230307.2.linux-arm64.tar.gz'; \
+			sha256='4d73984fda371b60808f88516528521751214a6c9af96db6387cbb05c2afd5a4'; \
 			;; \
 		*) echo >&2 "error: unsupported architecture '$arch' (likely packaging update needed)"; exit 1 ;; \
 	esac; \
diff --git a/src/microsoft/1.19/cbl-mariner1.0/Dockerfile b/src/microsoft/1.19/cbl-mariner1.0/Dockerfile
index f539a977..fec233fa 100644
--- a/src/microsoft/1.19/cbl-mariner1.0/Dockerfile
+++ b/src/microsoft/1.19/cbl-mariner1.0/Dockerfile
@@ -24,23 +24,23 @@ RUN tdnf install -y \
 
 ENV PATH /usr/local/go/bin:$PATH
 
-ENV GOLANG_VERSION 1.19.6
+ENV GOLANG_VERSION 1.19.7
 
 RUN set -eux; \
 	arch="$(uname -m)"; \
 	url=; \
 	case "$arch" in \
 		'x86_64') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230214.2/go.20230214.2.linux-amd64.tar.gz'; \
-			sha256='2334a3f31ff12a89231efa9d21bd537c3054e62ed28596a08c73aef2993f455e'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230307.2/go.20230307.2.linux-amd64.tar.gz'; \
+			sha256='babbb898f7dce7f4725b4bef05594fc658d541ba0c324dc38f75a8ca489732de'; \
 			;; \
 		'armv7') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230214.2/go.20230214.2.linux-armv6l.tar.gz'; \
-			sha256='1491d6c59d193c3a37feeddf314b52807ca81113492c01b41951cc18d2d3666c'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230307.2/go.20230307.2.linux-armv6l.tar.gz'; \
+			sha256='dc31f6577b6172635ec95d1241e6494439fb3d1b50ce316520d2dc6b4e82d536'; \
 			;; \
 		'aarch64') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230214.2/go.20230214.2.linux-arm64.tar.gz'; \
-			sha256='0774e6966b20dc7a4a088a33b6e7b84553d59f5484c6b353bab2790456768661'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230307.2/go.20230307.2.linux-arm64.tar.gz'; \
+			sha256='4d73984fda371b60808f88516528521751214a6c9af96db6387cbb05c2afd5a4'; \
 			;; \
 		*) echo >&2 "error: unsupported architecture '$arch' (likely packaging update needed)"; exit 1 ;; \
 	esac; \
diff --git a/src/microsoft/1.19/cbl-mariner2.0/Dockerfile b/src/microsoft/1.19/cbl-mariner2.0/Dockerfile
index 7e81bea5..0b136780 100644
--- a/src/microsoft/1.19/cbl-mariner2.0/Dockerfile
+++ b/src/microsoft/1.19/cbl-mariner2.0/Dockerfile
@@ -24,23 +24,23 @@ RUN tdnf install -y \
 
 ENV PATH /usr/local/go/bin:$PATH
 
-ENV GOLANG_VERSION 1.19.6
+ENV GOLANG_VERSION 1.19.7
 
 RUN set -eux; \
 	arch="$(uname -m)"; \
 	url=; \
 	case "$arch" in \
 		'x86_64') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230214.2/go.20230214.2.linux-amd64.tar.gz'; \
-			sha256='2334a3f31ff12a89231efa9d21bd537c3054e62ed28596a08c73aef2993f455e'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230307.2/go.20230307.2.linux-amd64.tar.gz'; \
+			sha256='babbb898f7dce7f4725b4bef05594fc658d541ba0c324dc38f75a8ca489732de'; \
 			;; \
 		'armv7') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230214.2/go.20230214.2.linux-armv6l.tar.gz'; \
-			sha256='1491d6c59d193c3a37feeddf314b52807ca81113492c01b41951cc18d2d3666c'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230307.2/go.20230307.2.linux-armv6l.tar.gz'; \
+			sha256='dc31f6577b6172635ec95d1241e6494439fb3d1b50ce316520d2dc6b4e82d536'; \
 			;; \
 		'aarch64') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230214.2/go.20230214.2.linux-arm64.tar.gz'; \
-			sha256='0774e6966b20dc7a4a088a33b6e7b84553d59f5484c6b353bab2790456768661'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230307.2/go.20230307.2.linux-arm64.tar.gz'; \
+			sha256='4d73984fda371b60808f88516528521751214a6c9af96db6387cbb05c2afd5a4'; \
 			;; \
 		*) echo >&2 "error: unsupported architecture '$arch' (likely packaging update needed)"; exit 1 ;; \
 	esac; \
diff --git a/src/microsoft/1.19/fips-linux/bullseye/Dockerfile b/src/microsoft/1.19/fips-linux/bullseye/Dockerfile
index 13909e65..34b154e8 100644
--- a/src/microsoft/1.19/fips-linux/bullseye/Dockerfile
+++ b/src/microsoft/1.19/fips-linux/bullseye/Dockerfile
@@ -11,7 +11,7 @@
 # build tools. If they build the non-FIPS images with the obvious tags, this "from" should line up.
 # The .NET Docker build infrastructure replaces the ARGs with arch-specific values, etc.
 ARG REPO=mcr.microsoft.com/oss/go/microsoft/golang
-ARG FROM_TAG=1.19.6-1-bullseye
+ARG FROM_TAG=1.19.7-1-bullseye
 
 FROM $REPO:$FROM_TAG
 
diff --git a/src/microsoft/1.19/fips-linux/buster/Dockerfile b/src/microsoft/1.19/fips-linux/buster/Dockerfile
index 2c37613a..2eab1e35 100644
--- a/src/microsoft/1.19/fips-linux/buster/Dockerfile
+++ b/src/microsoft/1.19/fips-linux/buster/Dockerfile
@@ -11,7 +11,7 @@
 # build tools. If they build the non-FIPS images with the obvious tags, this "from" should line up.
 # The .NET Docker build infrastructure replaces the ARGs with arch-specific values, etc.
 ARG REPO=mcr.microsoft.com/oss/go/microsoft/golang
-ARG FROM_TAG=1.19.6-1-buster
+ARG FROM_TAG=1.19.7-1-buster
 
 FROM $REPO:$FROM_TAG
 
diff --git a/src/microsoft/1.19/fips-linux/cbl-mariner1.0/Dockerfile b/src/microsoft/1.19/fips-linux/cbl-mariner1.0/Dockerfile
index 861f6865..3426d38f 100644
--- a/src/microsoft/1.19/fips-linux/cbl-mariner1.0/Dockerfile
+++ b/src/microsoft/1.19/fips-linux/cbl-mariner1.0/Dockerfile
@@ -11,7 +11,7 @@
 # build tools. If they build the non-FIPS images with the obvious tags, this "from" should line up.
 # The .NET Docker build infrastructure replaces the ARGs with arch-specific values, etc.
 ARG REPO=mcr.microsoft.com/oss/go/microsoft/golang
-ARG FROM_TAG=1.19.6-1-cbl-mariner1.0
+ARG FROM_TAG=1.19.7-1-cbl-mariner1.0
 
 FROM $REPO:$FROM_TAG
 
diff --git a/src/microsoft/1.19/fips-linux/cbl-mariner2.0/Dockerfile b/src/microsoft/1.19/fips-linux/cbl-mariner2.0/Dockerfile
index 5016de79..b4a3682c 100644
--- a/src/microsoft/1.19/fips-linux/cbl-mariner2.0/Dockerfile
+++ b/src/microsoft/1.19/fips-linux/cbl-mariner2.0/Dockerfile
@@ -11,7 +11,7 @@
 # build tools. If they build the non-FIPS images with the obvious tags, this "from" should line up.
 # The .NET Docker build infrastructure replaces the ARGs with arch-specific values, etc.
 ARG REPO=mcr.microsoft.com/oss/go/microsoft/golang
-ARG FROM_TAG=1.19.6-1-cbl-mariner2.0
+ARG FROM_TAG=1.19.7-1-cbl-mariner2.0
 
 FROM $REPO:$FROM_TAG
 
diff --git a/src/microsoft/1.19/windows/nanoserver-1809/Dockerfile b/src/microsoft/1.19/windows/nanoserver-1809/Dockerfile
index 5e151c0c..8e9cb349 100644
--- a/src/microsoft/1.19/windows/nanoserver-1809/Dockerfile
+++ b/src/microsoft/1.19/windows/nanoserver-1809/Dockerfile
@@ -7,7 +7,7 @@
 ARG REPO=mcr.microsoft.com/oss/go/microsoft/golang
 # It's easy to download Go and install it in server core, but not nanoserver. So, to build
 # nanoserver, copy over the server core installation.
-ARG DOWNLOADER_TAG=1.19.6-windowsservercore-1809
+ARG DOWNLOADER_TAG=1.19.7-windowsservercore-1809
 FROM $REPO:$DOWNLOADER_TAG AS downloader
 
 FROM mcr.microsoft.com/windows/nanoserver:1809
@@ -27,7 +27,7 @@ RUN setx /m PATH "%GOPATH%\bin;C:\Program Files\Go\bin;%PATH%"
 USER ContainerUser
 # doing this first to share cache across versions more aggressively
 
-ENV GOLANG_VERSION 1.19.6
+ENV GOLANG_VERSION 1.19.7
 
 # Docker's Windows path parsing is absolutely *cursed*; please just trust me on this one -Tianon
 COPY --from=downloader ["C:\\\\Program Files\\\\Go","C:\\\\Program Files\\\\Go"]
diff --git a/src/microsoft/1.19/windows/nanoserver-ltsc2022/Dockerfile b/src/microsoft/1.19/windows/nanoserver-ltsc2022/Dockerfile
index e201fe46..387b1024 100644
--- a/src/microsoft/1.19/windows/nanoserver-ltsc2022/Dockerfile
+++ b/src/microsoft/1.19/windows/nanoserver-ltsc2022/Dockerfile
@@ -7,7 +7,7 @@
 ARG REPO=mcr.microsoft.com/oss/go/microsoft/golang
 # It's easy to download Go and install it in server core, but not nanoserver. So, to build
 # nanoserver, copy over the server core installation.
-ARG DOWNLOADER_TAG=1.19.6-windowsservercore-ltsc2022
+ARG DOWNLOADER_TAG=1.19.7-windowsservercore-ltsc2022
 FROM $REPO:$DOWNLOADER_TAG AS downloader
 
 FROM mcr.microsoft.com/windows/nanoserver:ltsc2022
@@ -27,7 +27,7 @@ RUN setx /m PATH "%GOPATH%\bin;C:\Program Files\Go\bin;%PATH%"
 USER ContainerUser
 # doing this first to share cache across versions more aggressively
 
-ENV GOLANG_VERSION 1.19.6
+ENV GOLANG_VERSION 1.19.7
 
 # Docker's Windows path parsing is absolutely *cursed*; please just trust me on this one -Tianon
 COPY --from=downloader ["C:\\\\Program Files\\\\Go","C:\\\\Program Files\\\\Go"]
diff --git a/src/microsoft/1.19/windows/windowsservercore-1809/Dockerfile b/src/microsoft/1.19/windows/windowsservercore-1809/Dockerfile
index bf55e044..1d8f63e0 100644
--- a/src/microsoft/1.19/windows/windowsservercore-1809/Dockerfile
+++ b/src/microsoft/1.19/windows/windowsservercore-1809/Dockerfile
@@ -53,14 +53,14 @@ RUN $newPath = ('{0}\bin;C:\Program Files\Go\bin;{1}' -f $env:GOPATH, $env:PATH)
 	[Environment]::SetEnvironmentVariable('PATH', $newPath, [EnvironmentVariableTarget]::Machine);
 # doing this first to share cache across versions more aggressively
 
-ENV GOLANG_VERSION 1.19.6
+ENV GOLANG_VERSION 1.19.7
 
-RUN $url = 'https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230214.2/go.20230214.2.windows-amd64.zip'; \
+RUN $url = 'https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230307.2/go.20230307.2.windows-amd64.zip'; \
 	Write-Host ('Downloading {0} ...' -f $url); \
 	[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; \
 	Invoke-WebRequest -Uri $url -OutFile 'go.zip'; \
 	\
-	$sha256 = 'a1e529c4d360f63acb51c660b8998ad5e3a3226c2257d8821913d5aa6c306108'; \
+	$sha256 = 'e3684ed3ce0f98f611b5422221b4bae39084a500085f7f317095fe9beb0a572a'; \
 	Write-Host ('Verifying sha256 ({0}) ...' -f $sha256); \
 	if ((Get-FileHash go.zip -Algorithm sha256).Hash -ne $sha256) { \
 		Write-Host 'FAILED!'; \
diff --git a/src/microsoft/1.19/windows/windowsservercore-ltsc2016/Dockerfile b/src/microsoft/1.19/windows/windowsservercore-ltsc2016/Dockerfile
index d592601f..26efe92a 100644
--- a/src/microsoft/1.19/windows/windowsservercore-ltsc2016/Dockerfile
+++ b/src/microsoft/1.19/windows/windowsservercore-ltsc2016/Dockerfile
@@ -53,14 +53,14 @@ RUN $newPath = ('{0}\bin;C:\Program Files\Go\bin;{1}' -f $env:GOPATH, $env:PATH)
 	[Environment]::SetEnvironmentVariable('PATH', $newPath, [EnvironmentVariableTarget]::Machine);
 # doing this first to share cache across versions more aggressively
 
-ENV GOLANG_VERSION 1.19.6
+ENV GOLANG_VERSION 1.19.7
 
-RUN $url = 'https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230214.2/go.20230214.2.windows-amd64.zip'; \
+RUN $url = 'https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230307.2/go.20230307.2.windows-amd64.zip'; \
 	Write-Host ('Downloading {0} ...' -f $url); \
 	[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; \
 	Invoke-WebRequest -Uri $url -OutFile 'go.zip'; \
 	\
-	$sha256 = 'a1e529c4d360f63acb51c660b8998ad5e3a3226c2257d8821913d5aa6c306108'; \
+	$sha256 = 'e3684ed3ce0f98f611b5422221b4bae39084a500085f7f317095fe9beb0a572a'; \
 	Write-Host ('Verifying sha256 ({0}) ...' -f $sha256); \
 	if ((Get-FileHash go.zip -Algorithm sha256).Hash -ne $sha256) { \
 		Write-Host 'FAILED!'; \
diff --git a/src/microsoft/1.19/windows/windowsservercore-ltsc2022/Dockerfile b/src/microsoft/1.19/windows/windowsservercore-ltsc2022/Dockerfile
index a562df4e..cdcd5201 100644
--- a/src/microsoft/1.19/windows/windowsservercore-ltsc2022/Dockerfile
+++ b/src/microsoft/1.19/windows/windowsservercore-ltsc2022/Dockerfile
@@ -53,14 +53,14 @@ RUN $newPath = ('{0}\bin;C:\Program Files\Go\bin;{1}' -f $env:GOPATH, $env:PATH)
 	[Environment]::SetEnvironmentVariable('PATH', $newPath, [EnvironmentVariableTarget]::Machine);
 # doing this first to share cache across versions more aggressively
 
-ENV GOLANG_VERSION 1.19.6
+ENV GOLANG_VERSION 1.19.7
 
-RUN $url = 'https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230214.2/go.20230214.2.windows-amd64.zip'; \
+RUN $url = 'https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230307.2/go.20230307.2.windows-amd64.zip'; \
 	Write-Host ('Downloading {0} ...' -f $url); \
 	[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; \
 	Invoke-WebRequest -Uri $url -OutFile 'go.zip'; \
 	\
-	$sha256 = 'a1e529c4d360f63acb51c660b8998ad5e3a3226c2257d8821913d5aa6c306108'; \
+	$sha256 = 'e3684ed3ce0f98f611b5422221b4bae39084a500085f7f317095fe9beb0a572a'; \
 	Write-Host ('Verifying sha256 ({0}) ...' -f $sha256); \
 	if ((Get-FileHash go.zip -Algorithm sha256).Hash -ne $sha256) { \
 		Write-Host 'FAILED!'; \
diff --git a/src/microsoft/1.20/bullseye/Dockerfile b/src/microsoft/1.20/bullseye/Dockerfile
index 36681b2d..db5d8e77 100644
--- a/src/microsoft/1.20/bullseye/Dockerfile
+++ b/src/microsoft/1.20/bullseye/Dockerfile
@@ -20,23 +20,23 @@ RUN set -eux; \
 
 ENV PATH /usr/local/go/bin:$PATH
 
-ENV GOLANG_VERSION 1.20.1
+ENV GOLANG_VERSION 1.20.2
 
 RUN set -eux; \
 	arch="$(dpkg --print-architecture)"; arch="${arch##*-}"; \
 	url=; \
 	case "$arch" in \
 		'amd64') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230214.4/go.20230214.4.linux-amd64.tar.gz'; \
-			sha256='fd08d56d29cace74d91c2d1353747c09ed0491ea6b7244f7d1cb3365448720a5'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230307.4/go.20230307.4.linux-amd64.tar.gz'; \
+			sha256='87b90c64e6f1d44339c9255a5b9ea56956f0a445efbd39b20b084b1c029a04fd'; \
 			;; \
 		'armhf') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230214.4/go.20230214.4.linux-armv6l.tar.gz'; \
-			sha256='eaf3f591d8fb04ef171310c396f2c57537a9fe5b0480a1f0fdf537266daf4f63'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230307.4/go.20230307.4.linux-armv6l.tar.gz'; \
+			sha256='adaa6da12dfe984cc8434b604cf9fb18b6f19509170f5cd04ac9bdd0752f4859'; \
 			;; \
 		'arm64') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230214.4/go.20230214.4.linux-arm64.tar.gz'; \
-			sha256='f1e9a9b3797973f518afc14ebb80801eddfb7bb750431e816c308c67423bfeb1'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230307.4/go.20230307.4.linux-arm64.tar.gz'; \
+			sha256='91e1526c17013c7771cce6ed4351d98b11c79be78143e681f14b6d76e8643b06'; \
 			;; \
 		*) echo >&2 "error: unsupported architecture '$arch' (likely packaging update needed)"; exit 1 ;; \
 	esac; \
diff --git a/src/microsoft/1.20/buster/Dockerfile b/src/microsoft/1.20/buster/Dockerfile
index 3e2d0429..681b281a 100644
--- a/src/microsoft/1.20/buster/Dockerfile
+++ b/src/microsoft/1.20/buster/Dockerfile
@@ -20,23 +20,23 @@ RUN set -eux; \
 
 ENV PATH /usr/local/go/bin:$PATH
 
-ENV GOLANG_VERSION 1.20.1
+ENV GOLANG_VERSION 1.20.2
 
 RUN set -eux; \
 	arch="$(dpkg --print-architecture)"; arch="${arch##*-}"; \
 	url=; \
 	case "$arch" in \
 		'amd64') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230214.4/go.20230214.4.linux-amd64.tar.gz'; \
-			sha256='fd08d56d29cace74d91c2d1353747c09ed0491ea6b7244f7d1cb3365448720a5'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230307.4/go.20230307.4.linux-amd64.tar.gz'; \
+			sha256='87b90c64e6f1d44339c9255a5b9ea56956f0a445efbd39b20b084b1c029a04fd'; \
 			;; \
 		'armhf') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230214.4/go.20230214.4.linux-armv6l.tar.gz'; \
-			sha256='eaf3f591d8fb04ef171310c396f2c57537a9fe5b0480a1f0fdf537266daf4f63'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230307.4/go.20230307.4.linux-armv6l.tar.gz'; \
+			sha256='adaa6da12dfe984cc8434b604cf9fb18b6f19509170f5cd04ac9bdd0752f4859'; \
 			;; \
 		'arm64') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230214.4/go.20230214.4.linux-arm64.tar.gz'; \
-			sha256='f1e9a9b3797973f518afc14ebb80801eddfb7bb750431e816c308c67423bfeb1'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230307.4/go.20230307.4.linux-arm64.tar.gz'; \
+			sha256='91e1526c17013c7771cce6ed4351d98b11c79be78143e681f14b6d76e8643b06'; \
 			;; \
 		*) echo >&2 "error: unsupported architecture '$arch' (likely packaging update needed)"; exit 1 ;; \
 	esac; \
diff --git a/src/microsoft/1.20/cbl-mariner1.0/Dockerfile b/src/microsoft/1.20/cbl-mariner1.0/Dockerfile
index b473c140..55306ec2 100644
--- a/src/microsoft/1.20/cbl-mariner1.0/Dockerfile
+++ b/src/microsoft/1.20/cbl-mariner1.0/Dockerfile
@@ -24,23 +24,23 @@ RUN tdnf install -y \
 
 ENV PATH /usr/local/go/bin:$PATH
 
-ENV GOLANG_VERSION 1.20.1
+ENV GOLANG_VERSION 1.20.2
 
 RUN set -eux; \
 	arch="$(uname -m)"; \
 	url=; \
 	case "$arch" in \
 		'x86_64') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230214.4/go.20230214.4.linux-amd64.tar.gz'; \
-			sha256='fd08d56d29cace74d91c2d1353747c09ed0491ea6b7244f7d1cb3365448720a5'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230307.4/go.20230307.4.linux-amd64.tar.gz'; \
+			sha256='87b90c64e6f1d44339c9255a5b9ea56956f0a445efbd39b20b084b1c029a04fd'; \
 			;; \
 		'armv7') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230214.4/go.20230214.4.linux-armv6l.tar.gz'; \
-			sha256='eaf3f591d8fb04ef171310c396f2c57537a9fe5b0480a1f0fdf537266daf4f63'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230307.4/go.20230307.4.linux-armv6l.tar.gz'; \
+			sha256='adaa6da12dfe984cc8434b604cf9fb18b6f19509170f5cd04ac9bdd0752f4859'; \
 			;; \
 		'aarch64') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230214.4/go.20230214.4.linux-arm64.tar.gz'; \
-			sha256='f1e9a9b3797973f518afc14ebb80801eddfb7bb750431e816c308c67423bfeb1'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230307.4/go.20230307.4.linux-arm64.tar.gz'; \
+			sha256='91e1526c17013c7771cce6ed4351d98b11c79be78143e681f14b6d76e8643b06'; \
 			;; \
 		*) echo >&2 "error: unsupported architecture '$arch' (likely packaging update needed)"; exit 1 ;; \
 	esac; \
diff --git a/src/microsoft/1.20/cbl-mariner2.0/Dockerfile b/src/microsoft/1.20/cbl-mariner2.0/Dockerfile
index dd0ba950..e543a55d 100644
--- a/src/microsoft/1.20/cbl-mariner2.0/Dockerfile
+++ b/src/microsoft/1.20/cbl-mariner2.0/Dockerfile
@@ -24,23 +24,23 @@ RUN tdnf install -y \
 
 ENV PATH /usr/local/go/bin:$PATH
 
-ENV GOLANG_VERSION 1.20.1
+ENV GOLANG_VERSION 1.20.2
 
 RUN set -eux; \
 	arch="$(uname -m)"; \
 	url=; \
 	case "$arch" in \
 		'x86_64') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230214.4/go.20230214.4.linux-amd64.tar.gz'; \
-			sha256='fd08d56d29cace74d91c2d1353747c09ed0491ea6b7244f7d1cb3365448720a5'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230307.4/go.20230307.4.linux-amd64.tar.gz'; \
+			sha256='87b90c64e6f1d44339c9255a5b9ea56956f0a445efbd39b20b084b1c029a04fd'; \
 			;; \
 		'armv7') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230214.4/go.20230214.4.linux-armv6l.tar.gz'; \
-			sha256='eaf3f591d8fb04ef171310c396f2c57537a9fe5b0480a1f0fdf537266daf4f63'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230307.4/go.20230307.4.linux-armv6l.tar.gz'; \
+			sha256='adaa6da12dfe984cc8434b604cf9fb18b6f19509170f5cd04ac9bdd0752f4859'; \
 			;; \
 		'aarch64') \
-			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230214.4/go.20230214.4.linux-arm64.tar.gz'; \
-			sha256='f1e9a9b3797973f518afc14ebb80801eddfb7bb750431e816c308c67423bfeb1'; \
+			url='https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230307.4/go.20230307.4.linux-arm64.tar.gz'; \
+			sha256='91e1526c17013c7771cce6ed4351d98b11c79be78143e681f14b6d76e8643b06'; \
 			;; \
 		*) echo >&2 "error: unsupported architecture '$arch' (likely packaging update needed)"; exit 1 ;; \
 	esac; \
diff --git a/src/microsoft/1.20/fips-linux/bullseye/Dockerfile b/src/microsoft/1.20/fips-linux/bullseye/Dockerfile
index 64f9c0a1..07776823 100644
--- a/src/microsoft/1.20/fips-linux/bullseye/Dockerfile
+++ b/src/microsoft/1.20/fips-linux/bullseye/Dockerfile
@@ -11,7 +11,7 @@
 # build tools. If they build the non-FIPS images with the obvious tags, this "from" should line up.
 # The .NET Docker build infrastructure replaces the ARGs with arch-specific values, etc.
 ARG REPO=mcr.microsoft.com/oss/go/microsoft/golang
-ARG FROM_TAG=1.20.1-1-bullseye
+ARG FROM_TAG=1.20.2-1-bullseye
 
 FROM $REPO:$FROM_TAG
 
diff --git a/src/microsoft/1.20/fips-linux/buster/Dockerfile b/src/microsoft/1.20/fips-linux/buster/Dockerfile
index 0acf691f..138193ca 100644
--- a/src/microsoft/1.20/fips-linux/buster/Dockerfile
+++ b/src/microsoft/1.20/fips-linux/buster/Dockerfile
@@ -11,7 +11,7 @@
 # build tools. If they build the non-FIPS images with the obvious tags, this "from" should line up.
 # The .NET Docker build infrastructure replaces the ARGs with arch-specific values, etc.
 ARG REPO=mcr.microsoft.com/oss/go/microsoft/golang
-ARG FROM_TAG=1.20.1-1-buster
+ARG FROM_TAG=1.20.2-1-buster
 
 FROM $REPO:$FROM_TAG
 
diff --git a/src/microsoft/1.20/fips-linux/cbl-mariner1.0/Dockerfile b/src/microsoft/1.20/fips-linux/cbl-mariner1.0/Dockerfile
index c3ceff59..8ac7687b 100644
--- a/src/microsoft/1.20/fips-linux/cbl-mariner1.0/Dockerfile
+++ b/src/microsoft/1.20/fips-linux/cbl-mariner1.0/Dockerfile
@@ -11,7 +11,7 @@
 # build tools. If they build the non-FIPS images with the obvious tags, this "from" should line up.
 # The .NET Docker build infrastructure replaces the ARGs with arch-specific values, etc.
 ARG REPO=mcr.microsoft.com/oss/go/microsoft/golang
-ARG FROM_TAG=1.20.1-1-cbl-mariner1.0
+ARG FROM_TAG=1.20.2-1-cbl-mariner1.0
 
 FROM $REPO:$FROM_TAG
 
diff --git a/src/microsoft/1.20/fips-linux/cbl-mariner2.0/Dockerfile b/src/microsoft/1.20/fips-linux/cbl-mariner2.0/Dockerfile
index 3bf6a423..0b5114f3 100644
--- a/src/microsoft/1.20/fips-linux/cbl-mariner2.0/Dockerfile
+++ b/src/microsoft/1.20/fips-linux/cbl-mariner2.0/Dockerfile
@@ -11,7 +11,7 @@
 # build tools. If they build the non-FIPS images with the obvious tags, this "from" should line up.
 # The .NET Docker build infrastructure replaces the ARGs with arch-specific values, etc.
 ARG REPO=mcr.microsoft.com/oss/go/microsoft/golang
-ARG FROM_TAG=1.20.1-1-cbl-mariner2.0
+ARG FROM_TAG=1.20.2-1-cbl-mariner2.0
 
 FROM $REPO:$FROM_TAG
 
diff --git a/src/microsoft/1.20/windows/nanoserver-1809/Dockerfile b/src/microsoft/1.20/windows/nanoserver-1809/Dockerfile
index b8cd3262..ee6dbc23 100644
--- a/src/microsoft/1.20/windows/nanoserver-1809/Dockerfile
+++ b/src/microsoft/1.20/windows/nanoserver-1809/Dockerfile
@@ -7,7 +7,7 @@
 ARG REPO=mcr.microsoft.com/oss/go/microsoft/golang
 # It's easy to download Go and install it in server core, but not nanoserver. So, to build
 # nanoserver, copy over the server core installation.
-ARG DOWNLOADER_TAG=1.20.1-windowsservercore-1809
+ARG DOWNLOADER_TAG=1.20.2-windowsservercore-1809
 FROM $REPO:$DOWNLOADER_TAG AS downloader
 
 FROM mcr.microsoft.com/windows/nanoserver:1809
@@ -27,7 +27,7 @@ RUN setx /m PATH "%GOPATH%\bin;C:\Program Files\Go\bin;%PATH%"
 USER ContainerUser
 # doing this first to share cache across versions more aggressively
 
-ENV GOLANG_VERSION 1.20.1
+ENV GOLANG_VERSION 1.20.2
 
 # Docker's Windows path parsing is absolutely *cursed*; please just trust me on this one -Tianon
 COPY --from=downloader ["C:\\\\Program Files\\\\Go","C:\\\\Program Files\\\\Go"]
diff --git a/src/microsoft/1.20/windows/nanoserver-ltsc2022/Dockerfile b/src/microsoft/1.20/windows/nanoserver-ltsc2022/Dockerfile
index 14e535d3..f9b7c43a 100644
--- a/src/microsoft/1.20/windows/nanoserver-ltsc2022/Dockerfile
+++ b/src/microsoft/1.20/windows/nanoserver-ltsc2022/Dockerfile
@@ -7,7 +7,7 @@
 ARG REPO=mcr.microsoft.com/oss/go/microsoft/golang
 # It's easy to download Go and install it in server core, but not nanoserver. So, to build
 # nanoserver, copy over the server core installation.
-ARG DOWNLOADER_TAG=1.20.1-windowsservercore-ltsc2022
+ARG DOWNLOADER_TAG=1.20.2-windowsservercore-ltsc2022
 FROM $REPO:$DOWNLOADER_TAG AS downloader
 
 FROM mcr.microsoft.com/windows/nanoserver:ltsc2022
@@ -27,7 +27,7 @@ RUN setx /m PATH "%GOPATH%\bin;C:\Program Files\Go\bin;%PATH%"
 USER ContainerUser
 # doing this first to share cache across versions more aggressively
 
-ENV GOLANG_VERSION 1.20.1
+ENV GOLANG_VERSION 1.20.2
 
 # Docker's Windows path parsing is absolutely *cursed*; please just trust me on this one -Tianon
 COPY --from=downloader ["C:\\\\Program Files\\\\Go","C:\\\\Program Files\\\\Go"]
diff --git a/src/microsoft/1.20/windows/windowsservercore-1809/Dockerfile b/src/microsoft/1.20/windows/windowsservercore-1809/Dockerfile
index 3cb39009..bee023fe 100644
--- a/src/microsoft/1.20/windows/windowsservercore-1809/Dockerfile
+++ b/src/microsoft/1.20/windows/windowsservercore-1809/Dockerfile
@@ -53,14 +53,14 @@ RUN $newPath = ('{0}\bin;C:\Program Files\Go\bin;{1}' -f $env:GOPATH, $env:PATH)
 	[Environment]::SetEnvironmentVariable('PATH', $newPath, [EnvironmentVariableTarget]::Machine);
 # doing this first to share cache across versions more aggressively
 
-ENV GOLANG_VERSION 1.20.1
+ENV GOLANG_VERSION 1.20.2
 
-RUN $url = 'https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230214.4/go.20230214.4.windows-amd64.zip'; \
+RUN $url = 'https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230307.4/go.20230307.4.windows-amd64.zip'; \
 	Write-Host ('Downloading {0} ...' -f $url); \
 	[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; \
 	Invoke-WebRequest -Uri $url -OutFile 'go.zip'; \
 	\
-	$sha256 = '908cafa4d99e3eaea3678d572b286507664af20fb0a49377df1f2b07c34d4412'; \
+	$sha256 = 'a646b6783af68fa04f792bce4f2e5a1d2f632a5bd461ffcfc007bb912426f587'; \
 	Write-Host ('Verifying sha256 ({0}) ...' -f $sha256); \
 	if ((Get-FileHash go.zip -Algorithm sha256).Hash -ne $sha256) { \
 		Write-Host 'FAILED!'; \
diff --git a/src/microsoft/1.20/windows/windowsservercore-ltsc2016/Dockerfile b/src/microsoft/1.20/windows/windowsservercore-ltsc2016/Dockerfile
index b12b050e..680c8bfa 100644
--- a/src/microsoft/1.20/windows/windowsservercore-ltsc2016/Dockerfile
+++ b/src/microsoft/1.20/windows/windowsservercore-ltsc2016/Dockerfile
@@ -53,14 +53,14 @@ RUN $newPath = ('{0}\bin;C:\Program Files\Go\bin;{1}' -f $env:GOPATH, $env:PATH)
 	[Environment]::SetEnvironmentVariable('PATH', $newPath, [EnvironmentVariableTarget]::Machine);
 # doing this first to share cache across versions more aggressively
 
-ENV GOLANG_VERSION 1.20.1
+ENV GOLANG_VERSION 1.20.2
 
-RUN $url = 'https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230214.4/go.20230214.4.windows-amd64.zip'; \
+RUN $url = 'https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230307.4/go.20230307.4.windows-amd64.zip'; \
 	Write-Host ('Downloading {0} ...' -f $url); \
 	[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; \
 	Invoke-WebRequest -Uri $url -OutFile 'go.zip'; \
 	\
-	$sha256 = '908cafa4d99e3eaea3678d572b286507664af20fb0a49377df1f2b07c34d4412'; \
+	$sha256 = 'a646b6783af68fa04f792bce4f2e5a1d2f632a5bd461ffcfc007bb912426f587'; \
 	Write-Host ('Verifying sha256 ({0}) ...' -f $sha256); \
 	if ((Get-FileHash go.zip -Algorithm sha256).Hash -ne $sha256) { \
 		Write-Host 'FAILED!'; \
diff --git a/src/microsoft/1.20/windows/windowsservercore-ltsc2022/Dockerfile b/src/microsoft/1.20/windows/windowsservercore-ltsc2022/Dockerfile
index c3ec085c..35dac320 100644
--- a/src/microsoft/1.20/windows/windowsservercore-ltsc2022/Dockerfile
+++ b/src/microsoft/1.20/windows/windowsservercore-ltsc2022/Dockerfile
@@ -53,14 +53,14 @@ RUN $newPath = ('{0}\bin;C:\Program Files\Go\bin;{1}' -f $env:GOPATH, $env:PATH)
 	[Environment]::SetEnvironmentVariable('PATH', $newPath, [EnvironmentVariableTarget]::Machine);
 # doing this first to share cache across versions more aggressively
 
-ENV GOLANG_VERSION 1.20.1
+ENV GOLANG_VERSION 1.20.2
 
-RUN $url = 'https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230214.4/go.20230214.4.windows-amd64.zip'; \
+RUN $url = 'https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230307.4/go.20230307.4.windows-amd64.zip'; \
 	Write-Host ('Downloading {0} ...' -f $url); \
 	[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; \
 	Invoke-WebRequest -Uri $url -OutFile 'go.zip'; \
 	\
-	$sha256 = '908cafa4d99e3eaea3678d572b286507664af20fb0a49377df1f2b07c34d4412'; \
+	$sha256 = 'a646b6783af68fa04f792bce4f2e5a1d2f632a5bd461ffcfc007bb912426f587'; \
 	Write-Host ('Verifying sha256 ({0}) ...' -f $sha256); \
 	if ((Get-FileHash go.zip -Algorithm sha256).Hash -ne $sha256) { \
 		Write-Host 'FAILED!'; \
diff --git a/src/microsoft/versions.json b/src/microsoft/versions.json
index fb5a2dd7..ad6fcc09 100644
--- a/src/microsoft/versions.json
+++ b/src/microsoft/versions.json
@@ -6,9 +6,9 @@
           "GOARCH": "amd64",
           "GOOS": "linux"
         },
-        "sha256": "2334a3f31ff12a89231efa9d21bd537c3054e62ed28596a08c73aef2993f455e",
+        "sha256": "babbb898f7dce7f4725b4bef05594fc658d541ba0c324dc38f75a8ca489732de",
         "supported": true,
-        "url": "https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230214.2/go.20230214.2.linux-amd64.tar.gz"
+        "url": "https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230307.2/go.20230307.2.linux-amd64.tar.gz"
       },
       "arm32v7": {
         "env": {
@@ -16,27 +16,27 @@
           "GOARM": "7",
           "GOOS": "linux"
         },
-        "sha256": "1491d6c59d193c3a37feeddf314b52807ca81113492c01b41951cc18d2d3666c",
+        "sha256": "dc31f6577b6172635ec95d1241e6494439fb3d1b50ce316520d2dc6b4e82d536",
         "supported": true,
-        "url": "https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230214.2/go.20230214.2.linux-armv6l.tar.gz"
+        "url": "https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230307.2/go.20230307.2.linux-armv6l.tar.gz"
       },
       "arm64v8": {
         "env": {
           "GOARCH": "arm64",
           "GOOS": "linux"
         },
-        "sha256": "0774e6966b20dc7a4a088a33b6e7b84553d59f5484c6b353bab2790456768661",
+        "sha256": "4d73984fda371b60808f88516528521751214a6c9af96db6387cbb05c2afd5a4",
         "supported": true,
-        "url": "https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230214.2/go.20230214.2.linux-arm64.tar.gz"
+        "url": "https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230307.2/go.20230307.2.linux-arm64.tar.gz"
       },
       "windows-amd64": {
         "env": {
           "GOARCH": "amd64",
           "GOOS": "windows"
         },
-        "sha256": "a1e529c4d360f63acb51c660b8998ad5e3a3226c2257d8821913d5aa6c306108",
+        "sha256": "e3684ed3ce0f98f611b5422221b4bae39084a500085f7f317095fe9beb0a572a",
         "supported": true,
-        "url": "https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230214.2/go.20230214.2.windows-amd64.zip"
+        "url": "https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.19/20230307.2/go.20230307.2.windows-amd64.zip"
       }
     },
     "variants": [
@@ -54,7 +54,7 @@
       "windows/nanoserver-ltsc2022",
       "windows/nanoserver-1809"
     ],
-    "version": "1.19.6",
+    "version": "1.19.7",
     "revision": "1",
     "preferredMajor": true,
     "preferredMinor": true,
@@ -67,9 +67,9 @@
           "GOARCH": "amd64",
           "GOOS": "linux"
         },
-        "sha256": "fd08d56d29cace74d91c2d1353747c09ed0491ea6b7244f7d1cb3365448720a5",
+        "sha256": "87b90c64e6f1d44339c9255a5b9ea56956f0a445efbd39b20b084b1c029a04fd",
         "supported": true,
-        "url": "https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230214.4/go.20230214.4.linux-amd64.tar.gz"
+        "url": "https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230307.4/go.20230307.4.linux-amd64.tar.gz"
       },
       "arm32v7": {
         "env": {
@@ -77,27 +77,27 @@
           "GOARM": "7",
           "GOOS": "linux"
         },
-        "sha256": "eaf3f591d8fb04ef171310c396f2c57537a9fe5b0480a1f0fdf537266daf4f63",
+        "sha256": "adaa6da12dfe984cc8434b604cf9fb18b6f19509170f5cd04ac9bdd0752f4859",
         "supported": true,
-        "url": "https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230214.4/go.20230214.4.linux-armv6l.tar.gz"
+        "url": "https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230307.4/go.20230307.4.linux-armv6l.tar.gz"
       },
       "arm64v8": {
         "env": {
           "GOARCH": "arm64",
           "GOOS": "linux"
         },
-        "sha256": "f1e9a9b3797973f518afc14ebb80801eddfb7bb750431e816c308c67423bfeb1",
+        "sha256": "91e1526c17013c7771cce6ed4351d98b11c79be78143e681f14b6d76e8643b06",
         "supported": true,
-        "url": "https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230214.4/go.20230214.4.linux-arm64.tar.gz"
+        "url": "https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230307.4/go.20230307.4.linux-arm64.tar.gz"
       },
       "windows-amd64": {
         "env": {
           "GOARCH": "amd64",
           "GOOS": "windows"
         },
-        "sha256": "908cafa4d99e3eaea3678d572b286507664af20fb0a49377df1f2b07c34d4412",
+        "sha256": "a646b6783af68fa04f792bce4f2e5a1d2f632a5bd461ffcfc007bb912426f587",
         "supported": true,
-        "url": "https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230214.4/go.20230214.4.windows-amd64.zip"
+        "url": "https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft/release-branch.go1.20/20230307.4/go.20230307.4.windows-amd64.zip"
       }
     },
     "variants": [
@@ -115,7 +115,7 @@
       "windows/nanoserver-ltsc2022",
       "windows/nanoserver-1809"
     ],
-    "version": "1.20.1",
+    "version": "1.20.2",
     "revision": "1",
     "preferredVariant": "bullseye"
   }