diff --git a/Dockerfile b/Dockerfile
index fff191cc58..0ea5eb48d5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -67,7 +67,7 @@ RUN SENTRY_AUTH_TOKEN=$SENTRY_AUTH_TOKEN \
 # copying the bskyweb/ tree from stage 1 is enough for go:embed to find
 # everything.
 #
-FROM golang:1.26-bookworm AS go-build
+FROM golang:1.27-bookworm AS go-build
 
 WORKDIR /usr/src/social-app
 
diff --git a/Dockerfile.embedr b/Dockerfile.embedr
index 5c87122efe..7e85d71ebc 100644
--- a/Dockerfile.embedr
+++ b/Dockerfile.embedr
@@ -1,4 +1,4 @@
-FROM golang:1.26-bookworm AS build-env
+FROM golang:1.27-bookworm AS build-env
 
 WORKDIR /usr/src/social-app