diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index f6da409a4..3eb3b5734 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -37,7 +37,7 @@ jobs:
       uses: golang/govulncheck-action@b625fbe08f3bccbe446d94fbf87fcc875a4f50ee # v1.0.4
       with:
         cache: false
-        go-version-input: '1.25.6'
+        go-version-input: '1.25.7'
         # An explicit Go version is needed for govulncheck-action since internally
         # it uses an outdated setup-go@v5.0 action that does not respect the 'toolchain'
         # directive in the 'go.mod' file.
diff --git a/go.mod b/go.mod
index 2700afdd3..3577cabdf 100644
--- a/go.mod
+++ b/go.mod
@@ -2,7 +2,7 @@ module github.com/kopia/kopia
 
 go 1.25
 
-toolchain go1.25.6
+toolchain go1.25.7
 
 require (
 	cloud.google.com/go/storage v1.59.2