diff --git a/Dockerfile b/Dockerfile
index 9755ca8..0b6bb03 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -53,7 +53,7 @@ RUN cd /tmp/preinstall && \
 
 # Go
 # renovate: datasource=golang-version depName=go
-ARG GO_VERSION=1.26.2
+ARG GO_VERSION=1.26.3
 ENV PATH="/mise/installs/go/${GO_VERSION}/bin:$PATH"
 RUN mise use -g go@${GO_VERSION} && \
     ln -s /mise/installs/go/${GO_VERSION} /mise/installs/go/current
@@ -81,7 +81,7 @@ RUN mise use -g rust@${RUST_VERSION}
 
 # ---
 
-FROM golang:1.26.2-bookworm@sha256:47ce5636e9936b2c5cbf708925578ef386b4f8872aec74a67bd13a627d242b19 AS builder
+FROM golang:1.26.3-bookworm@sha256:386d475a660466863d9f8c766fec64d7fdad3edac2c6a05020c09534d71edb4b AS builder
 WORKDIR /src
 
 COPY go.mod go.sum ./
diff --git a/go.mod b/go.mod
index cc1eb37..119547b 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/codize-dev/sandbox
 
-go 1.26.2
+go 1.26.3
 
 require (
 	github.com/labstack/echo/v5 v5.1.0
diff --git a/internal/sandbox/defaults/go/go.mod.tmpl b/internal/sandbox/defaults/go/go.mod.tmpl
index c9eb699..32acc58 100644
--- a/internal/sandbox/defaults/go/go.mod.tmpl
+++ b/internal/sandbox/defaults/go/go.mod.tmpl
@@ -1,5 +1,5 @@
 module sandbox
 
-go 1.26.2
+go 1.26.3
 
 require golang.org/x/text v0.34.0 // indirect
diff --git a/mise.toml b/mise.toml
index 16c1932..e4528db 100644
--- a/mise.toml
+++ b/mise.toml
@@ -1,5 +1,5 @@
 [tools]
-go = "1.26.2"
+go = "1.26.3"
 "aqua:golangci/golangci-lint" = "2.11.4"
 "aqua:evilmartians/lefthook" = "2.1.6"
 "aqua:hadolint/hadolint" = "2.14.0"