diff --git a/.tool-versions b/.tool-versions
index 8fb890341..93fe5c1b5 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -1 +1 @@
-golang 1.26.3
+golang 1.26.7
diff --git a/Dockerfile b/Dockerfile
index c7b5acab1..85de96ad9 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -16,7 +16,7 @@
 
 ## Build
 
-FROM docker.io/library/golang:1.26.3@sha256:2d6c80227255c3112a4d08e67ba98e58efd3846daf15d9d7d4c389565d881b1a AS build
+FROM docker.io/library/golang:1.26.7@sha256:e30143be198ab04cf7ba25fba83ab3a692ca584c994aad0bf131fa0eb32dd8c1 AS build
 
 ARG TARGETOS
 ARG TARGETARCH
diff --git a/Dockerfile.dist b/Dockerfile.dist
index 9258ef3bb..718ffdf6e 100644
--- a/Dockerfile.dist
+++ b/Dockerfile.dist
@@ -16,7 +16,7 @@
 
 ## Build
 
-FROM registry.access.redhat.com/ubi9/go-toolset:1.26.3@sha256:17c888d75753f128f6cbdc5587932c3abd2632ca8e0931aa27b9a60c7a75ac62 AS build
+FROM registry.access.redhat.com/ubi9/go-toolset:1.26.7@sha256:5e68f09a652ac6627a83c57655e42e24575efb278b54336039c9308607fc6b21 AS build
 
 ARG TARGETOS
 ARG TARGETARCH
diff --git a/acceptance/go.mod b/acceptance/go.mod
index 79d07aa02..ef0244287 100644
--- a/acceptance/go.mod
+++ b/acceptance/go.mod
@@ -1,6 +1,6 @@
 module github.com/conforma/cli/acceptance
 
-go 1.26.3
+go 1.26.7
 
 require (
 	cuelang.org/go v0.16.0
diff --git a/go.mod b/go.mod
index b2cc0ea35..0ed3281c8 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/conforma/cli
 
-go 1.26.3
+go 1.26.7
 
 require (
 	cuelang.org/go v0.16.0
diff --git a/tools/go.mod b/tools/go.mod
index 5a9c2cd73..069ceb900 100644
--- a/tools/go.mod
+++ b/tools/go.mod
@@ -1,6 +1,6 @@
 module github.com/conforma/cli/tools
 
-go 1.26.3
+go 1.26.7
 
 require (
 	github.com/daixiang0/gci v0.13.7
diff --git a/tools/kubectl/go.mod b/tools/kubectl/go.mod
index b3f9b749d..08efeb217 100644
--- a/tools/kubectl/go.mod
+++ b/tools/kubectl/go.mod
@@ -1,6 +1,6 @@
 module github.com/conforma/cli/tools/kubectl
 
-go 1.26.3
+go 1.26.7
 
 require k8s.io/kubernetes v1.34.2