diff --git a/.github/workflows/release-github.yml b/.github/workflows/release-github.yml
index 460cd5edf..a21700f6b 100644
--- a/.github/workflows/release-github.yml
+++ b/.github/workflows/release-github.yml
@@ -29,7 +29,7 @@ jobs:
       - name: setup go environment
         uses: actions/setup-go@v3
         with:
-          go-version: '1.20.1'
+          go-version: '1.20.2'
       - name: run goreleaser
         uses: goreleaser/goreleaser-action@v2
         with:
diff --git a/Dockerfile b/Dockerfile
index 73095cef9..d09d6708d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -11,7 +11,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM docker.io/library/golang:1.20.1-alpine as builder
+FROM docker.io/library/golang:1.20.2-alpine as builder
 ARG TARGETPLATFORM
 RUN apk add git make
 ENV ORASPKG /oras
diff --git a/internal/version/version.go b/internal/version/version.go
index 9dc88dc7a..9d73c8c66 100644
--- a/internal/version/version.go
+++ b/internal/version/version.go
@@ -17,7 +17,7 @@ package version
 
 var (
 	// Version is the current version of the oras.
-	Version = "1.0.0-rc.2"
+	Version = "1.0.0"
 	// BuildMetadata is the extra build time data
 	BuildMetadata = "unreleased"
 	// GitCommit is the git sha1