diff --git a/Dockerfile b/Dockerfile
index d3afa82..063a4aa 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -9,7 +9,7 @@
 # The previous split (a static image plus a separate `-gpu` variant) meant two
 # artifacts, two digests to sign, and a values field to pick between them —
 # for a difference no operator wanted to reason about.
-FROM golang:1.26.8-bookworm@sha256:a688600ca24f8a4d3ca77f95b0dd40704a9fc787c826660eb7ba0b641b8b175d AS builder
+FROM golang:1.27.1-bookworm@sha256:69a7b9788769bec032d238959b61854e9ae87f57be9029ec04e9885fabf99195 AS builder
 WORKDIR /src
 COPY go.mod go.sum* ./
 RUN go mod download