diff --git a/.github/workflows/make.yaml b/.github/workflows/make.yaml
index 0bce83ccb..5b197c2ff 100644
--- a/.github/workflows/make.yaml
+++ b/.github/workflows/make.yaml
@@ -23,7 +23,7 @@ jobs:
           submodules: recursive
       - uses: "actions/setup-go@v6"
         with:
-          go-version: "1.25.6"
+          go-version: "1.25.7"
           cache: true
       - uses: "actions/setup-node@v6"
         with:
@@ -138,7 +138,7 @@ jobs:
           submodules: recursive
       - uses: "actions/setup-go@v6"
         with:
-          go-version: "1.25.6"
+          go-version: "1.25.7"
           cache: true
       - uses: "actions/setup-node@v6"
         with:
@@ -163,7 +163,7 @@ jobs:
           submodules: recursive
       - uses: "actions/setup-go@v6"
         with:
-          go-version: "1.25.6"
+          go-version: "1.25.7"
           cache: true
       - uses: "actions/setup-node@v6"
         with:
@@ -211,7 +211,7 @@ jobs:
           submodules: recursive
       - uses: "actions/setup-go@v6"
         with:
-          go-version: "1.25.6"
+          go-version: "1.25.7"
           cache: true
       - uses: "actions/setup-node@v6"
         with:
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 4ac414ed7..fcbe44b25 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -28,7 +28,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v6
         with:
-          go-version: "1.25.6"
+          go-version: "1.25.7"
           cache: true
 
       - name: Set up Node.js
diff --git a/go.mod b/go.mod
index 20b831ff2..8f78f9613 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module go.probo.inc/probo
 
-go 1.25.6
+go 1.25.7
 
 require (
 	codeberg.org/miekg/dns v0.6.40