diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 60a5213..c10e8c4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -33,7 +33,7 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  GO_VERSION: "1.25.11"
+  GO_VERSION: "1.25.12"
 
 jobs:
   test:
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 77879f4..44c72a3 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -39,7 +39,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
-          go-version: "1.25.11"
+          go-version: "1.25.12"
           cache: true
 
       - name: Initialize CodeQL
diff --git a/.github/workflows/kernel-freshness.yml b/.github/workflows/kernel-freshness.yml
index cae1aba..97e24f2 100644
--- a/.github/workflows/kernel-freshness.yml
+++ b/.github/workflows/kernel-freshness.yml
@@ -32,7 +32,7 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
-          go-version: "1.25.11"
+          go-version: "1.25.12"
           cache: true
 
       - name: Build CLI
diff --git a/.github/workflows/profile-catalog-maintenance.yml b/.github/workflows/profile-catalog-maintenance.yml
index cadc5ed..f9429b0 100644
--- a/.github/workflows/profile-catalog-maintenance.yml
+++ b/.github/workflows/profile-catalog-maintenance.yml
@@ -20,7 +20,7 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
-          go-version: "1.25.11"
+          go-version: "1.25.12"
           cache: true
 
       - name: Build CLI
diff --git a/.github/workflows/release-artifacts.yml b/.github/workflows/release-artifacts.yml
index c84cb31..04d9ad5 100644
--- a/.github/workflows/release-artifacts.yml
+++ b/.github/workflows/release-artifacts.yml
@@ -33,7 +33,7 @@ concurrency:
   cancel-in-progress: false
 
 env:
-  GO_VERSION: "1.25.11"
+  GO_VERSION: "1.25.12"
 
 jobs:
   build-and-sign:
diff --git a/.github/workflows/stability-gate.yml b/.github/workflows/stability-gate.yml
index 9d45650..4255f14 100644
--- a/.github/workflows/stability-gate.yml
+++ b/.github/workflows/stability-gate.yml
@@ -26,7 +26,7 @@ concurrency:
   cancel-in-progress: false
 
 env:
-  GO_VERSION: "1.25.11"
+  GO_VERSION: "1.25.12"
 
 jobs:
   stability: