diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f986a7f..381db07 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -8,7 +8,7 @@ on:
     types: [opened, reopened, synchronize, labeled]
 
 env:
-  GO_VERSION: 1.25.7
+  GO_VERSION: 1.25.12
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b429dbb..f696437 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -6,7 +6,7 @@ on:
     types: [published]
 
 env:
-  GO_VERSION: 1.25.7
+  GO_VERSION: 1.25.12
 
 jobs:
   check-version:
diff --git a/Dockerfile b/Dockerfile
index 3773484..eb85b27 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # Use native platform for build stage
-FROM --platform=$BUILDPLATFORM golang:1.25.7 AS build
+FROM --platform=$BUILDPLATFORM golang:1.25.12 AS build
 ARG version=unknown
 ARG hash=unknown
 ARG ldflags=