diff --git a/.tool-versions b/.tool-versions
index 901f416cf..8dc011fd4 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -1 +1 @@
-golang 1.25.8
+golang 1.25.9
diff --git a/Dockerfile b/Dockerfile
index 6ac6f41de..8d3bf22b1 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -16,7 +16,7 @@
 
 ## Build
 
-FROM docker.io/library/golang:1.25.8 AS build
+FROM docker.io/library/golang:1.25.9 AS build
 
 ARG TARGETOS
 ARG TARGETARCH
diff --git a/Dockerfile.dist b/Dockerfile.dist
index e417349ec..675778f4b 100644
--- a/Dockerfile.dist
+++ b/Dockerfile.dist
@@ -16,7 +16,7 @@
 
 ## Build
 
-FROM registry.access.redhat.com/ubi9/go-toolset:1.25.8@sha256:7a0aad98db45c0aac69813bb9b5af20018bd51f47a2fc183aeca89d6a05c046e AS build
+FROM registry.access.redhat.com/ubi9/go-toolset:1.25.9@sha256:90a36bc2013b3fcb28e2a4b082c9b895d7c2c679e58b95aed9721970f3339d0e AS build
 
 ARG TARGETOS
 ARG TARGETARCH
diff --git a/acceptance/go.mod b/acceptance/go.mod
index 18bfd2c47..551095397 100644
--- a/acceptance/go.mod
+++ b/acceptance/go.mod
@@ -1,6 +1,6 @@
 module github.com/conforma/cli/acceptance
 
-go 1.25.8
+go 1.25.9
 
 require (
 	cuelang.org/go v0.15.1
diff --git a/go.mod b/go.mod
index 41c0e9db8..a35b335c5 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/conforma/cli
 
-go 1.25.8
+go 1.25.9
 
 require (
 	cuelang.org/go v0.16.0
diff --git a/tools/go.mod b/tools/go.mod
index 7dabaf237..fa86c8f03 100644
--- a/tools/go.mod
+++ b/tools/go.mod
@@ -1,6 +1,6 @@
 module github.com/conforma/cli/tools
 
-go 1.25.8
+go 1.25.9
 
 require (
 	github.com/daixiang0/gci v0.13.7
diff --git a/tools/kubectl/go.mod b/tools/kubectl/go.mod
index 84ffe3f4f..7188bbd74 100644
--- a/tools/kubectl/go.mod
+++ b/tools/kubectl/go.mod
@@ -1,6 +1,6 @@
 module github.com/conforma/cli/tools/kubectl
 
-go 1.25.8
+go 1.25.9
 
 require k8s.io/kubernetes v1.34.3