diff --git a/Dockerfile b/Dockerfile
index 59cff8a..72435b6 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,7 @@
 # syntax=docker/dockerfile:1@sha256:ecfaec9ed6d810b56388c508f4121597bfbba70d41a6dfeee4d8cad5f295fc32
 # check=error=true
 
-FROM --platform=$BUILDPLATFORM golang:1.27.0-trixie@sha256:6212da3924947f4b6a939df02ea627c13f338f1a41d6c3fcb0dd9d076eef46c4 AS build
+FROM --platform=$BUILDPLATFORM golang:1.27.1-trixie@sha256:137ca8442e368f5f5bb4d4f84d8cc1f6c2d898edf8a380459eb407f89d149b0d AS build
 
 ARG TARGETOS TARGETARCH
 ARG VERSION=dev
diff --git a/cmd/dockerflagsgen/go.mod b/cmd/dockerflagsgen/go.mod
index 2ca5286..4a4e650 100644
--- a/cmd/dockerflagsgen/go.mod
+++ b/cmd/dockerflagsgen/go.mod
@@ -2,7 +2,7 @@
 // main.go.
 module github.com/bare-devcontainer/decolint/cmd/dockerflagsgen
 
-go 1.27.0
+go 1.27.1
 
 require (
 	github.com/bare-devcontainer/decolint v0.0.0-00010101000000-000000000000
diff --git a/go.mod b/go.mod
index 8a71c03..363bd66 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/bare-devcontainer/decolint
 
-go 1.27.0
+go 1.27.1
 
 require (
 	github.com/compose-spec/compose-go/v2 v2.14.0