diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 25bf49b..313452a 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -38,7 +38,7 @@ jobs:
     if: ${{ vars.BUILD_ON != 'github' }}
     runs-on: light
     container:
-      image: golang:1.26-bookworm@sha256:d9c68c2c51161e12fd77e4c6320687c9cd86e1af1e3ad6e6cd63ff970641453c # 1.26-bookworm
+      image: golang:1.26-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af # 1.26-bookworm
     steps:
       - uses: coffey-labs/actions/checkout@fab0c4d45e0162963965f1555df27b7bed5e20ec
       - run: go vet ./...
@@ -53,7 +53,7 @@ jobs:
     needs: [test]
     runs-on: light
     container:
-      image: golang:1.26-bookworm@sha256:d9c68c2c51161e12fd77e4c6320687c9cd86e1af1e3ad6e6cd63ff970641453c # 1.26-bookworm
+      image: golang:1.26-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af # 1.26-bookworm
     steps:
       # Full history: the ancestry check below cannot be answered from a
       # shallow clone. The checkout also fetches every branch as origin/*.
@@ -119,7 +119,7 @@ jobs:
     runs-on: wait
     timeout-minutes: 150
     container:
-      image: golang:1.26-bookworm@sha256:d9c68c2c51161e12fd77e4c6320687c9cd86e1af1e3ad6e6cd63ff970641453c # 1.26-bookworm
+      image: golang:1.26-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af # 1.26-bookworm
     steps:
       - shell: bash
         env:
diff --git a/go.mod b/go.mod
index a68f734..dcdcdd3 100644
--- a/go.mod
+++ b/go.mod
@@ -1,3 +1,3 @@
 module github.com/Coffey-Labs/stalwart-migrator
 
-go 1.26.9
+go 1.26.10