diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 0bb545f0..1f238faa 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -20,7 +20,7 @@ jobs:
         uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: 1.26.2
+          go-version: 1.26.3
 
       - name: Go mod check
         run: |
@@ -46,5 +46,5 @@ jobs:
         uses: golang/govulncheck-action@b625fbe08f3bccbe446d94fbf87fcc875a4f50ee # v1.0.4
         with:
           # renovate: datasource=golang-version depName=go
-          go-version-input: 1.26.2
+          go-version-input: 1.26.3
           go-package: './...'
diff --git a/.github/workflows/tests-smoke.yaml b/.github/workflows/tests-smoke.yaml
index 230018cb..79a22908 100644
--- a/.github/workflows/tests-smoke.yaml
+++ b/.github/workflows/tests-smoke.yaml
@@ -23,7 +23,7 @@ jobs:
         uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: 1.26.2
+          go-version: 1.26.3
 
       - name: Run unit tests
         run: |
diff --git a/Dockerfile b/Dockerfile
index 492719bd..dd76f963 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@
 #
 # use skopeo inspect to get the multiarch manifest list digest
 # skopeo inspect --override-os linux docker://<GOLANG_IMAGE> | jq -r '.Digest'
-ARG GOLANG_IMAGE=docker.io/library/golang:1.26.2-alpine3.22@sha256:7ef941168f213aa115df2e61364d67682129e99dc8188b734139dea862cc7d31
+ARG GOLANG_IMAGE=docker.io/library/golang:1.26.3-alpine3.22@sha256:be93003ee861b3b91b6ebcb22678524947e0cd786c2df3f32af520006b1e54f5
 
 ARG BASE_IMAGE=scratch