diff --git a/.github/workflows/private.yaml b/.github/workflows/private.yaml
index 6c831380..f7adb002 100644
--- a/.github/workflows/private.yaml
+++ b/.github/workflows/private.yaml
@@ -1,6 +1,6 @@
 'env':
   'BASE_IMAGE': |-
-    ${{ vars.BASE_IMAGE || 'adguard/go-builder:1.26.6--1' }}
+    ${{ vars.BASE_IMAGE || 'adguard/go-builder:1.26.8--1' }}
   'CACHE_BUSTER': |-
     ${{ inputs.cache_buster || '0' }}
 'jobs':
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index c7b5f451..93b4ae3c 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -1,6 +1,6 @@
 'env':
   'BASE_IMAGE': |-
-    ${{ vars.BASE_IMAGE || 'adguard/go-builder:1.26.6--1' }}
+    ${{ vars.BASE_IMAGE || 'adguard/go-builder:1.26.8--1' }}
   'DIST_DIR': |-
     build
 'jobs':
diff --git a/.github/workflows/workflow.yaml b/.github/workflows/workflow.yaml
index 1af5e32f..3d05038b 100644
--- a/.github/workflows/workflow.yaml
+++ b/.github/workflows/workflow.yaml
@@ -1,5 +1,5 @@
 'env':
-  'GO_VERSION': '1.26.6'
+  'GO_VERSION': '1.26.8'
 'jobs':
   'TestJob':
     'if': |
diff --git a/Makefile b/Makefile
index 7a62c08e..4dd0f688 100644
--- a/Makefile
+++ b/Makefile
@@ -25,7 +25,7 @@ GOAMD64 = v1
 GOPROXY = https://proxy.golang.org|direct
 GOTELEMETRY = off
 OUT = dnsproxy
-GOTOOLCHAIN = go1.26.6
+GOTOOLCHAIN = go1.26.8
 RACE = 0
 REVISION = $${REVISION:-$$(git rev-parse --short HEAD)}
 
diff --git a/docker/ci.Dockerfile b/docker/ci.Dockerfile
index 260dec55..c58305b6 100644
--- a/docker/ci.Dockerfile
+++ b/docker/ci.Dockerfile
@@ -27,7 +27,7 @@
 # 6. Add a CACHE_BUSTER argument to stages to be able to rerun the stages if
 #    needed.  Keep it in sync with .github/workflows/.
 
-ARG BASE_IMAGE=adguard/go-builder:1.26.6--1
+ARG BASE_IMAGE=adguard/go-builder:1.26.8--1
 
 # The dependencies stage is needed to install packages and tool dependencies.
 # This is also where binaries like osslsigncode, which may be required for tests
diff --git a/docker/release.Dockerfile b/docker/release.Dockerfile
index 9c2ae275..353aea15 100644
--- a/docker/release.Dockerfile
+++ b/docker/release.Dockerfile
@@ -27,7 +27,7 @@
 # 6. Add a CACHE_BUSTER argument to stages to be able to rerun the stages if
 #    needed.  Keep it in sync with the files in .github/workflows/.
 
-ARG BASE_IMAGE=adguard/go-builder:1.26.6--1
+ARG BASE_IMAGE=adguard/go-builder:1.26.8--1
 
 # The builder stage is used to build release artifacts.  Real BRANCH, REVISION,
 # and SOURCE_DATE_EPOCH must be used here.
diff --git a/go.mod b/go.mod
index 514ede41..69aec1ca 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/AdguardTeam/dnsproxy
 
-go 1.26.6
+go 1.26.8
 
 require (
 	github.com/AdguardTeam/dnscrypt v0.0.2