diff --git a/Dockerfile b/Dockerfile
index 7da0c2dd95..79886b234a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -4,7 +4,7 @@
 #
 # Nothing fancy here: we copy in the source code and build on the Alpine Go
 # image. Refer to .dockerignore to get a sense of what we're not going to copy.
-FROM golang:1.26.3-alpine3.22@sha256:be93003ee861b3b91b6ebcb22678524947e0cd786c2df3f32af520006b1e54f5 AS builder
+FROM golang:1.26.4-alpine3.22@sha256:727cfc3c40be55cd1bc9a4a059406b28a059857e3be752aa9d09531e12c20c56 AS builder
 
 COPY . /src
 WORKDIR /src
diff --git a/dev/vendor-lib.sh b/dev/vendor-lib.sh
index a849b42ae3..8e22f43238 100755
--- a/dev/vendor-lib.sh
+++ b/dev/vendor-lib.sh
@@ -136,7 +136,7 @@ echo "Creating go.mod file..."
 cat > "$DEST_LIB/go.mod" <<EOF
 module github.com/sourcegraph/sourcegraph/lib
 
-go 1.26.3
+go 1.26.4
 EOF
 
 # Create README.md
diff --git a/go.mod b/go.mod
index dd31f33b0a..3412a52091 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/sourcegraph/src-cli
 
-go 1.26.3
+go 1.26.4
 
 require (
 	cloud.google.com/go/storage v1.50.0
diff --git a/lib/go.mod b/lib/go.mod
index 99a466ba2d..650889c7b3 100644
--- a/lib/go.mod
+++ b/lib/go.mod
@@ -1,6 +1,6 @@
 module github.com/sourcegraph/sourcegraph/lib
 
-go 1.26.3
+go 1.26.4
 
 require (
 	github.com/Masterminds/semver v1.5.0
diff --git a/mise.toml b/mise.toml
index 8cc336f07b..bf66c1e4e2 100644
--- a/mise.toml
+++ b/mise.toml
@@ -1,4 +1,4 @@
 [tools]
-golang = "1.26.3"
+golang = "1.26.4"
 shfmt = "3.8.0"
 shellcheck = "0.10.0"