diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 7e5daa2..29319c0 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -48,7 +48,9 @@ jobs:
           go-version-file: go.mod
           cache: true
       - name: Install govulncheck
-        run: go install golang.org/x/vuln/cmd/govulncheck@latest
+        # Pinned: @latest (v1.8.0) needs Go 1.26, and this module builds
+        # with the Go version in go.mod.
+        run: go install golang.org/x/vuln/cmd/govulncheck@v1.7.0
       - name: Run govulncheck
         env:
           GOWORK: off
diff --git a/go.mod b/go.mod
index 041c22b..a1f1593 100644
--- a/go.mod
+++ b/go.mod
@@ -1,5 +1,5 @@
 module github.com/pilot-protocol/trustedagents
 
-go 1.25.12
+go 1.25.13
 
-require github.com/pilot-protocol/common v0.5.13
+require github.com/pilot-protocol/common v0.5.15
diff --git a/go.sum b/go.sum
index 52178b4..d6520a3 100644
--- a/go.sum
+++ b/go.sum
@@ -1,2 +1,2 @@
-github.com/pilot-protocol/common v0.5.13 h1:h9NmPh37ZZujktpSAwgq2H2ai7jG240nQTetGNWtZ3U=
-github.com/pilot-protocol/common v0.5.13/go.mod h1:Ybc6f1A37s3ShoEh1nBMVL9DPyYlxvkqPTvtbxaNWg4=
+github.com/pilot-protocol/common v0.5.15 h1:ds6DNWlth97pMcXZ7fMgfy9/s553la3/YuYOkwoXjjE=
+github.com/pilot-protocol/common v0.5.15/go.mod h1:OTXD84ScrBbKTAhawgFlLw9HtisgNvr83Zs1yDAuG9k=