diff --git a/recipes/k/kubectl.toml b/recipes/k/kubectl.toml
index 41f1b6c6..ab171e52 100644
--- a/recipes/k/kubectl.toml
+++ b/recipes/k/kubectl.toml
@@ -1,6 +1,6 @@
 [package]
 name = "kubectl"
-version = "1.36.1"
+version = "1.36.3"
 # rev 3: CGO_ENABLED=0 static rebuild — the default-cgo
 # build linked the CI runner's glibc (see gale-recipes#189)
 revision = 3
@@ -10,8 +10,8 @@ homepage = "https://kubernetes.io/docs/reference/kubectl/"
 
 [source]
 repo = "kubernetes/kubernetes"
-url = "https://github.com/kubernetes/kubernetes/archive/refs/tags/v1.36.1.tar.gz"
-sha256 = "1ebfa65cc95fbeb2ef4aad6832a3fae4edb88516e43b6437b69a40895803e0e8"
+url = "https://github.com/kubernetes/kubernetes/archive/refs/tags/v1.36.3.tar.gz"
+sha256 = "950f7dd65b64b18ca065a08ae73dd5f61ff72b48c8778c5bfceacc84eaaf10ed"
 
 [build]
 steps = [