diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 9fb9e90..766d4d6 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -34,7 +34,7 @@ jobs:
           go-version-file: go.mod
 
       - name: Install govulncheck
-        run: go install golang.org/x/vuln/cmd/govulncheck@v1.7.0 # pinned: v1.8.0+ needs Go 1.26; bump with go.mod
+        run: go install golang.org/x/vuln/cmd/govulncheck@v1.8.0 # pinned; v1.8.0 needs Go 1.26 — bump together with go.mod
 
       - name: Scan server module
         run: govulncheck ./...
diff --git a/Dockerfile b/Dockerfile
index c419e31..353a439 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -8,7 +8,7 @@
 # ---------------------------------------------------------------------------
 # Stage 1: Build the Go binary
 # ---------------------------------------------------------------------------
-FROM golang:1.25-alpine AS builder
+FROM golang:1.26-alpine AS builder
 
 WORKDIR /src
 
diff --git a/go.mod b/go.mod
index 7790fb2..7dce12d 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module simpleauth
 
-go 1.25.14
+go 1.26.8
 
 require (
 	github.com/go-ldap/ldap/v3 v3.4.14