diff --git a/.tool-versions b/.tool-versions
index e21aa83dff..524a0c2b3f 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -1,3 +1,3 @@
-golang     1.24.1
+golang     1.24.5
 shfmt      3.8.0
 shellcheck 0.10.0
diff --git a/Dockerfile b/Dockerfile
index e183e19702..5354bb91d1 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -4,7 +4,7 @@
 #
 # Nothing fancy here: we copy in the source code and build on the Alpine Go
 # image. Refer to .dockerignore to get a sense of what we're not going to copy.
-FROM golang:1.24.1-alpine@sha256:43c094ad24b6ac0546c62193baeb3e6e49ce14d3250845d166c77c25f64b0386 as builder
+FROM golang:1.24.5-alpine@sha256:48ee313931980110b5a91bbe04abdf640b9a67ca5dea3a620f01bacf50593396 as builder
 
 COPY . /src
 WORKDIR /src