diff --git a/Dockerfile b/Dockerfile
index 41fe0d4..e01279b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1
 
-FROM --platform=$BUILDPLATFORM golang:1.27.1@sha256:512690a5660563b57d37ecc31129e7f136e831db2aed24a1dbeb8ad7380dc0fa AS builder
+FROM --platform=$BUILDPLATFORM golang:1.27.1@sha256:f44f6e88636cfb311f9ebace870ded69d943f227bb3cb27d32ffd84ea18c43ea AS builder
 
 ARG TARGETOS=linux
 ARG TARGETARCH
diff --git a/Dockerfile.apiserver b/Dockerfile.apiserver
index b1218dd..4da2f99 100644
--- a/Dockerfile.apiserver
+++ b/Dockerfile.apiserver
@@ -4,7 +4,7 @@
 # sandboxes.agents.x-k8s.io (see config/apiserver/ for the Deployment).
 #   docker build -f Dockerfile.apiserver -t <registry>/sandbox-apiserver:<tag> .
 
-FROM --platform=$BUILDPLATFORM golang:1.27.1@sha256:512690a5660563b57d37ecc31129e7f136e831db2aed24a1dbeb8ad7380dc0fa AS builder
+FROM --platform=$BUILDPLATFORM golang:1.27.1@sha256:f44f6e88636cfb311f9ebace870ded69d943f227bb3cb27d32ffd84ea18c43ea AS builder
 
 ARG TARGETOS=linux
 ARG TARGETARCH
diff --git a/Dockerfile.sdkloadgen b/Dockerfile.sdkloadgen
index 0da4e8c..d5d0289 100644
--- a/Dockerfile.sdkloadgen
+++ b/Dockerfile.sdkloadgen
@@ -4,7 +4,7 @@
 # benchmark that drives the writable aggregated apiserver (see deploy/loadgen-sdk/).
 #   docker build -f Dockerfile.sdkloadgen -t <registry>/sandbox-sdk-loadgen:<tag> .
 
-FROM --platform=$BUILDPLATFORM golang:1.27.1@sha256:512690a5660563b57d37ecc31129e7f136e831db2aed24a1dbeb8ad7380dc0fa AS builder
+FROM --platform=$BUILDPLATFORM golang:1.27.1@sha256:f44f6e88636cfb311f9ebace870ded69d943f227bb3cb27d32ffd84ea18c43ea AS builder
 
 ARG TARGETOS=linux
 ARG TARGETARCH