diff --git a/.tool-versions b/.tool-versions
index e21aa83dff..c14a9bea28 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -1,3 +1,3 @@
-golang     1.24.1
+golang     1.24.4
 shfmt      3.8.0
 shellcheck 0.10.0
diff --git a/Dockerfile b/Dockerfile
index e183e19702..cc6b2e0990 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -4,7 +4,7 @@
 #
 # Nothing fancy here: we copy in the source code and build on the Alpine Go
 # image. Refer to .dockerignore to get a sense of what we're not going to copy.
-FROM golang:1.24.1-alpine@sha256:43c094ad24b6ac0546c62193baeb3e6e49ce14d3250845d166c77c25f64b0386 as builder
+FROM golang:1.24.4-alpine@sha256:68932fa6d4d4059845c8f40ad7e654e626f3ebd3706eef7846f319293ab5cb7a as builder
 
 COPY . /src
 WORKDIR /src