diff --git a/Dockerfile b/Dockerfile
index 8a709763..183521f8 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@
 # CVE-2026-42505/42504/42507/39822/27145 that 1.26.3 carries).
 # Alpine variant kept for small image size and multi-arch builds; binary is statically
 # linked (CGO_ENABLED=0) so glibc CVEs in other base images do not apply here.
-FROM golang:1.26.5-alpine AS builder
+FROM golang:1.27rc2-alpine AS builder
 ARG TARGETARCH
 ARG VERSION=dev
 ARG GIT_COMMIT=unknown