diff --git a/Containerfile b/Containerfile
index eb83db1..568196e 100644
--- a/Containerfile
+++ b/Containerfile
@@ -1,6 +1,6 @@
 # Global ARGs: single source of truth for base image versions
 # renovate: datasource=docker depName=docker.io/library/golang
-ARG go_version=1.26
+ARG go_version=1.27
 # renovate: datasource=docker depName=docker.io/library/alpine
 ARG alpine_version=3.24
 # renovate: datasource=docker depName=docker.io/restic/restic
diff --git a/Makefile b/Makefile
index 7404639..2f38184 100644
--- a/Makefile
+++ b/Makefile
@@ -7,7 +7,7 @@ COMMIT_SHA        ?= $(shell git rev-parse --short HEAD 2>/dev/null || echo unkn
 # renovate: datasource=docker depName=docker.io/restic/restic
 RESTIC_VERSION    ?= 0.18.1
 # renovate: datasource=docker depName=docker.io/library/golang
-GO_IMAGE          ?= golang:1.26
+GO_IMAGE          ?= golang:1.27
 RESTIC_IMAGE      ?= restic/restic:$(RESTIC_VERSION)
 TEST_IMAGE        ?= conba-test:latest
 # renovate: datasource=docker depName=docker.io/golangci/golangci-lint