diff --git a/.github/actions/setup/action.yaml b/.github/actions/setup/action.yaml
index 01909ec34..5674efd2e 100644
--- a/.github/actions/setup/action.yaml
+++ b/.github/actions/setup/action.yaml
@@ -15,7 +15,7 @@ runs:
     - if: inputs.go == 'true'
       uses: "actions/setup-go@v6"
       with:
-        go-version: "1.26.2"
+        go-version: "1.26.3"
         cache: true
     - if: inputs.go == 'true'
       shell: bash
diff --git a/cmd/prb/CHANGELOG.md b/cmd/prb/CHANGELOG.md
index 9bd667313..dbf4af47e 100644
--- a/cmd/prb/CHANGELOG.md
+++ b/cmd/prb/CHANGELOG.md
@@ -4,6 +4,10 @@ All notable changes to the `prb` CLI will be documented in this file.
 
 ## Unreleased
 
+### Security
+
+- Upgrade go to 1.26.3
+
 ## [0.183.0] - 2026-05-07
 
 ### Added
diff --git a/cmd/probod-bootstrap/CHANGELOG.md b/cmd/probod-bootstrap/CHANGELOG.md
index e7b03d877..c8f9cf10c 100644
--- a/cmd/probod-bootstrap/CHANGELOG.md
+++ b/cmd/probod-bootstrap/CHANGELOG.md
@@ -4,6 +4,10 @@ All notable changes to `probod-bootstrap` will be documented in this file.
 
 ## Unreleased
 
+### Security
+
+- Upgrade go to 1.26.3
+
 ## [0.1.0] - 2026-04-27
 
 ### Added
diff --git a/cmd/probod/CHANGELOG.md b/cmd/probod/CHANGELOG.md
index 4f54e95c6..a54d6fd1b 100644
--- a/cmd/probod/CHANGELOG.md
+++ b/cmd/probod/CHANGELOG.md
@@ -4,6 +4,10 @@ All notable changes to `probod` (the server, including the bundled `@probo/conso
 
 ## Unreleased
 
+### Security
+
+- Upgrade go to 1.26.3
+
 ## [0.184.1] - 2026-05-08
 
 ### Changed
diff --git a/contrib/lima/provision.sh b/contrib/lima/provision.sh
index 4fa01ac6c..d1adc1bda 100755
--- a/contrib/lima/provision.sh
+++ b/contrib/lima/provision.sh
@@ -11,7 +11,7 @@ export LIMA_CIDATA_USER
 
 export DEBIAN_FRONTEND=noninteractive
 
-GO_VERSION="1.26.2"
+GO_VERSION="1.26.3"
 NODE_MAJOR=24
 NPM_VERSION="11.8.0"
 
diff --git a/go.mod b/go.mod
index be5a66483..c6d8a9984 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module go.probo.inc/probo
 
-go 1.26.2
+go 1.26.3
 
 require (
 	codeberg.org/miekg/dns v0.6.73