diff --git a/bootstrap/templates/addons/system-upgrade-controller/plans/agent.yaml.j2 b/bootstrap/templates/addons/system-upgrade-controller/plans/agent.yaml.j2
index 3a4cf75e..b4fa3611 100644
--- a/bootstrap/templates/addons/system-upgrade-controller/plans/agent.yaml.j2
+++ b/bootstrap/templates/addons/system-upgrade-controller/plans/agent.yaml.j2
@@ -5,7 +5,7 @@ metadata:
   name: agent
 spec:
   # renovate: datasource=github-releases depName=k3s-io/k3s
-  version: "v1.28.3+k3s2"
+  version: "v1.28.4+k3s2"
   serviceAccountName: system-upgrade
   concurrency: 1
   nodeSelector:
diff --git a/bootstrap/templates/addons/system-upgrade-controller/plans/server.yaml.j2 b/bootstrap/templates/addons/system-upgrade-controller/plans/server.yaml.j2
index bf7e03b3..68f18e02 100644
--- a/bootstrap/templates/addons/system-upgrade-controller/plans/server.yaml.j2
+++ b/bootstrap/templates/addons/system-upgrade-controller/plans/server.yaml.j2
@@ -5,7 +5,7 @@ metadata:
   name: server
 spec:
   # renovate: datasource=github-releases depName=k3s-io/k3s
-  version: "v1.28.3+k3s2"
+  version: "v1.28.4+k3s2"
   serviceAccountName: system-upgrade
   concurrency: 1
   cordon: true
diff --git a/bootstrap/templates/ansible/inventory/group_vars/kubernetes/main.yaml.j2 b/bootstrap/templates/ansible/inventory/group_vars/kubernetes/main.yaml.j2
index 42f6fe49..56bb2347 100644
--- a/bootstrap/templates/ansible/inventory/group_vars/kubernetes/main.yaml.j2
+++ b/bootstrap/templates/ansible/inventory/group_vars/kubernetes/main.yaml.j2
@@ -6,7 +6,7 @@
 #
 
 # renovate: datasource=github-releases depName=k3s-io/k3s
-k3s_release_version: "v1.28.3+k3s2"
+k3s_release_version: "v1.28.4+k3s2"
 k3s_install_hard_links: true
 k3s_become: true
 k3s_etcd_datastore: true