diff --git a/CHANGELOG.md b/CHANGELOG.md
index 73112a6..ca3d219 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,9 @@
 
 ## Unreleased
 
+- Update Go container to debian 12 (bookworm) slim as base image
+  ([#347](https://github.com/pulumi/pulumi-docker-containers/pull/347))
+
 - Update aws-iam-authenticator to version 0.6.29
   ([#345](https://github.com/pulumi/pulumi-docker-containers/pull/345))
 
diff --git a/docker/go/Dockerfile b/docker/go/Dockerfile
index 616405e..6024eb6 100644
--- a/docker/go/Dockerfile
+++ b/docker/go/Dockerfile
@@ -51,7 +51,7 @@ RUN case $(uname -m) in \
     go version
 
 # The runtime container
-FROM debian:11-slim
+FROM debian:12-slim
 LABEL org.opencontainers.image.description="Pulumi CLI container for go"
 WORKDIR /pulumi/projects