diff --git a/kubernetes/apps/system-upgrade/tuppr/upgrades/kubernetesupgrade.yaml b/kubernetes/apps/system-upgrade/tuppr/upgrades/kubernetesupgrade.yaml
index a62ccf13..3ec8007a 100644
--- a/kubernetes/apps/system-upgrade/tuppr/upgrades/kubernetesupgrade.yaml
+++ b/kubernetes/apps/system-upgrade/tuppr/upgrades/kubernetesupgrade.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   kubernetes:
     # renovate: datasource=docker depName=ghcr.io/siderolabs/kubelet
-    version: v1.34.2
+    version: v1.35.0
   healthChecks:
     - apiVersion: volsync.backube/v1alpha1
       kind: ReplicationSource
diff --git a/kubernetes/talos/machineconfig.yaml.j2 b/kubernetes/talos/machineconfig.yaml.j2
index 57f0d680..8997e35f 100644
--- a/kubernetes/talos/machineconfig.yaml.j2
+++ b/kubernetes/talos/machineconfig.yaml.j2
@@ -12,7 +12,7 @@ machine:
 
   kubelet:
     # renovate: datasource=docker depName=ghcr.io/siderolabs/kubelet
-    image: ghcr.io/siderolabs/kubelet:v1.34.2
+    image: ghcr.io/siderolabs/kubelet:v1.35.0
     defaultRuntimeSeccompProfileEnabled: true
     disableManifestsDirectory: true
     extraConfig:
@@ -125,7 +125,7 @@ cluster:
 
   apiServer:
     # renovate: datasource=docker depName=registry.k8s.io/kube-apiserver
-    image: registry.k8s.io/kube-apiserver:v1.34.2
+    image: registry.k8s.io/kube-apiserver:v1.35.0
     certSANs:
       - {{ hostvars[groups['k8s'][0]].cluster_endpoint }}
     disablePodSecurityPolicy: true
@@ -145,18 +145,18 @@ cluster:
 
   controllerManager:
     # renovate: datasource=docker depName=registry.k8s.io/kube-controller-manager
-    image: registry.k8s.io/kube-controller-manager:v1.34.2
+    image: registry.k8s.io/kube-controller-manager:v1.35.0
     extraArgs:
       bind-address: 0.0.0.0
 
   proxy:
     disabled: true
     # renovate: datasource=docker depName=registry.k8s.io/kube-proxy
-    image: registry.k8s.io/kube-proxy:v1.34.2
+    image: registry.k8s.io/kube-proxy:v1.35.0
 
   scheduler:
     # renovate: datasource=docker depName=registry.k8s.io/kube-scheduler
-    image: registry.k8s.io/kube-scheduler:v1.34.2
+    image: registry.k8s.io/kube-scheduler:v1.35.0
     extraArgs:
       bind-address: 0.0.0.0
     config: