diff --git a/Dockerfile b/Dockerfile
index fc1b880..0c43404 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,7 @@
 # Build stage. --platform=$BUILDPLATFORM keeps the Go toolchain on the native
 # runner architecture and cross-compiles for $TARGETARCH (see GOARCH below), so
 # an arm64 build doesn't run the whole builder under slow QEMU emulation.
-FROM --platform=$BUILDPLATFORM golang:1.26.5@sha256:3aff6657219a4d9c14e27fb1d8976c49c29fddb70ba835014f477e1c70636647 AS builder
+FROM --platform=$BUILDPLATFORM golang:1.26.5@sha256:2005724102f45917a63e9d092fc0e4ea56ea575048ce147caad5f5f61502c365 AS builder
 ARG TARGETOS
 ARG TARGETARCH
 ARG VERSION=dev