diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ee70cd2..f986a7f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -8,7 +8,7 @@ on:
     types: [opened, reopened, synchronize, labeled]
 
 env:
-  GO_VERSION: 1.25.1
+  GO_VERSION: 1.25.7
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c747b0f..b429dbb 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -6,7 +6,7 @@ on:
     types: [published]
 
 env:
-  GO_VERSION: 1.25.1
+  GO_VERSION: 1.25.7
 
 jobs:
   check-version:
diff --git a/Dockerfile b/Dockerfile
index c432ec5..3773484 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # Use native platform for build stage
-FROM --platform=$BUILDPLATFORM golang:1.25.1 AS build
+FROM --platform=$BUILDPLATFORM golang:1.25.7 AS build
 ARG version=unknown
 ARG hash=unknown
 ARG ldflags=