diff --git a/.github/workflows/aks-byocni.yaml b/.github/workflows/aks-byocni.yaml
index d840bfbed5..1753846b20 100644
--- a/.github/workflows/aks-byocni.yaml
+++ b/.github/workflows/aks-byocni.yaml
@@ -39,7 +39,7 @@ env:
   location: westus2
   cost_reduction: --node-vm-size Standard_B2s --node-osdisk-size 30
   # renovate: datasource=github-releases depName=cilium/cilium
-  cilium_version: v1.16.2
+  cilium_version: v1.16.3
   kubectl_version: v1.23.6
 
 jobs:
diff --git a/.github/workflows/eks-tunnel.yaml b/.github/workflows/eks-tunnel.yaml
index 8650830d06..53b40a0b3b 100644
--- a/.github/workflows/eks-tunnel.yaml
+++ b/.github/workflows/eks-tunnel.yaml
@@ -29,7 +29,7 @@ env:
   region: us-east-2
   eksctl_version: v0.147.0
   # renovate: datasource=github-releases depName=cilium/cilium
-  cilium_version: v1.16.2
+  cilium_version: v1.16.3
   kubectl_version: v1.23.6
 
 jobs:
diff --git a/.github/workflows/eks.yaml b/.github/workflows/eks.yaml
index 7112f6fd82..e0cff270da 100644
--- a/.github/workflows/eks.yaml
+++ b/.github/workflows/eks.yaml
@@ -29,7 +29,7 @@ env:
   region: us-east-2
   eksctl_version: v0.147.0
   # renovate: datasource=github-releases depName=cilium/cilium
-  cilium_version: v1.16.2
+  cilium_version: v1.16.3
   kubectl_version: v1.23.6
 
 jobs:
diff --git a/.github/workflows/externalworkloads.yaml b/.github/workflows/externalworkloads.yaml
index 741affa7f9..f4f7306497 100644
--- a/.github/workflows/externalworkloads.yaml
+++ b/.github/workflows/externalworkloads.yaml
@@ -37,7 +37,7 @@ env:
   zone: us-west2-a
   vmStartupScript: .github/gcp-vm-startup.sh
   # renovate: datasource=github-releases depName=cilium/cilium
-  cilium_version: v1.16.2
+  cilium_version: v1.16.3
   kubectl_version: v1.23.6
   USE_GKE_GCLOUD_AUTH_PLUGIN: True
 
diff --git a/.github/workflows/gke.yaml b/.github/workflows/gke.yaml
index 341f8cff4a..1ad441766b 100644
--- a/.github/workflows/gke.yaml
+++ b/.github/workflows/gke.yaml
@@ -36,7 +36,7 @@ concurrency:
 env:
   zone: us-west2-a
   # renovate: datasource=github-releases depName=cilium/cilium
-  cilium_version: v1.16.2
+  cilium_version: v1.16.3
   kubectl_version: v1.23.6
   USE_GKE_GCLOUD_AUTH_PLUGIN: True
 
diff --git a/.github/workflows/kind.yaml b/.github/workflows/kind.yaml
index cf44c3d2e3..9c567ecf51 100644
--- a/.github/workflows/kind.yaml
+++ b/.github/workflows/kind.yaml
@@ -17,7 +17,7 @@ env:
   TIMEOUT: 2m
   LOG_TIME: 30m
   # renovate: datasource=github-releases depName=cilium/cilium
-  cilium_version: v1.16.2
+  cilium_version: v1.16.3
   kubectl_version: v1.23.6
 
 jobs:
diff --git a/.github/workflows/multicluster.yaml b/.github/workflows/multicluster.yaml
index 42b81f5455..85eaa963ed 100644
--- a/.github/workflows/multicluster.yaml
+++ b/.github/workflows/multicluster.yaml
@@ -36,7 +36,7 @@ concurrency:
 env:
   zone: us-west2-a
   # renovate: datasource=github-releases depName=cilium/cilium
-  cilium_version: v1.16.2
+  cilium_version: v1.16.3
   kubectl_version: v1.23.6
   USE_GKE_GCLOUD_AUTH_PLUGIN: True