diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 77a99e2..8c83a1f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -22,7 +22,8 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
-          go-version-file: go.mod
+          # Match the Docker builder; go.mod remains the supported minimum.
+          go-version: '1.27.3'
 
       - name: Install native dependencies
         run: |
diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml
index 343d73c..5beb0d5 100644
--- a/.github/workflows/govulncheck.yml
+++ b/.github/workflows/govulncheck.yml
@@ -21,7 +21,8 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
-          go-version-file: go.mod
+          # Match the Docker builder; go.mod remains the supported minimum.
+          go-version: '1.27.3'
 
       - name: Install native dependencies
         run: |
diff --git a/Dockerfile b/Dockerfile
index 8ba1ca8..dd36507 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1
 
-FROM golang:1.27.1-bookworm AS builder
+FROM golang:1.27.3-bookworm AS builder
 
 WORKDIR /src