diff --git a/.github/workflows/toolkit.yml b/.github/workflows/toolkit.yml
index 27e84e53..2194fb40 100644
--- a/.github/workflows/toolkit.yml
+++ b/.github/workflows/toolkit.yml
@@ -20,14 +20,14 @@ jobs:
     - name: Set up Go
       uses: actions/setup-go@v6
       with:
-        go-version: '1.25'
+        go-version-file: ${{ github.workspace }}/go.mod
     - name: Build
       run: cd src/go; make linux-amd64; cd ../../
 
     - name: Build the Docker image
       run: echo "FROM oraclelinux:9-slim" > Dockerfile; echo "RUN microdnf -y update" >> Dockerfile; echo "COPY bin/* /usr/bin/" >> Dockerfile; docker build . --file Dockerfile --tag percona-toolkit:${{ github.sha }}
     - name: Run Trivy vulnerability scanner
-      uses: aquasecurity/trivy-action@0.34.0
+      uses: aquasecurity/trivy-action@0.35.0
       with:
           image-ref: 'percona-toolkit:${{ github.sha }}'
           format: 'table'
diff --git a/config/scripts/pt_builder.sh b/config/scripts/pt_builder.sh
index 136ee0d5..f7eb26d4 100644
--- a/config/scripts/pt_builder.sh
+++ b/config/scripts/pt_builder.sh
@@ -170,7 +170,7 @@ install_go() {
     #rm -rf /usr/local/go /usr/local/go1.8 /usr/local/go1.9
     #mv go1.9 /usr/local/
     #ln -s /usr/local/go1.9 /usr/local/go
-    GO_VERSION=1.25.5
+    GO_VERSION=1.25.8
     if [ x"$ARCH" = "xx86_64" ]; then
       GO_ARCH="amd64"
     elif [ x"$ARCH" = "xaarch64" ]; then
diff --git a/go.mod b/go.mod
index 695c6288..d118a63b 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/percona/percona-toolkit
 
-go 1.25.5
+go 1.25.8
 
 require (
 	github.com/AlekSi/pointer v1.2.0