diff --git a/client/go.mod b/client/go.mod
index 62d245b0..a8083eec 100644
--- a/client/go.mod
+++ b/client/go.mod
@@ -1,6 +1,6 @@
 module github.com/docker/secrets-engine/client
 
-go 1.25
+go 1.25.8
 
 // This `replace` is only for CI to function.
 // The correct version will get resolved from below when this module is
diff --git a/go.work b/go.work
index 41788e5b..f7342c64 100644
--- a/go.work
+++ b/go.work
@@ -1,4 +1,4 @@
-go 1.25.7
+go 1.25.8
 
 use (
 	./client
diff --git a/plugin/go.mod b/plugin/go.mod
index 5009a494..f1125a39 100644
--- a/plugin/go.mod
+++ b/plugin/go.mod
@@ -1,6 +1,6 @@
 module github.com/docker/secrets-engine/plugin
 
-go 1.25
+go 1.25.8
 
 // This `replace` is only for CI to function.
 // The correct version will get resolved from below when this module is
diff --git a/plugins/credentialhelper/go.mod b/plugins/credentialhelper/go.mod
index 2349fc28..93a2215d 100644
--- a/plugins/credentialhelper/go.mod
+++ b/plugins/credentialhelper/go.mod
@@ -1,6 +1,6 @@
 module github.com/docker/secrets-engine/plugins/credentialhelper
 
-go 1.25.0
+go 1.25.8
 
 // This `replace` is only for CI to function.
 // The correct version will get resolved from below when this module is
diff --git a/plugins/pass/go.mod b/plugins/pass/go.mod
index 3b7816cf..3bd2123e 100644
--- a/plugins/pass/go.mod
+++ b/plugins/pass/go.mod
@@ -1,6 +1,6 @@
 module github.com/docker/secrets-engine/plugins/pass
 
-go 1.25.0
+go 1.25.8
 
 replace github.com/docker/secrets-engine/store => ./../../store
 
diff --git a/store/go.mod b/store/go.mod
index 6cdec507..9130fc17 100644
--- a/store/go.mod
+++ b/store/go.mod
@@ -1,6 +1,6 @@
 module github.com/docker/secrets-engine/store
 
-go 1.25
+go 1.25.8
 
 // This `replace` is only for CI to function.
 // The correct version will get resolved from below when this module is
diff --git a/vendor/modules.txt b/vendor/modules.txt
index 1d655b0c..94fcea26 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -40,11 +40,11 @@ github.com/davecgh/go-spew/spew
 github.com/docker/docker-credential-helpers/client
 github.com/docker/docker-credential-helpers/credentials
 # github.com/docker/secrets-engine/plugin v0.0.22 => ./plugin
-## explicit; go 1.25
+## explicit; go 1.25.8
 # github.com/docker/secrets-engine/store v0.0.22 => ./store
-## explicit; go 1.25
+## explicit; go 1.25.8
 # github.com/docker/secrets-engine/x v0.0.25-do.not.use => ./x
-## explicit; go 1.25
+## explicit; go 1.25.8
 # github.com/go-logr/logr v1.4.3
 ## explicit; go 1.18
 github.com/go-logr/logr
diff --git a/x/go.mod b/x/go.mod
index 368f55a3..5e42270d 100644
--- a/x/go.mod
+++ b/x/go.mod
@@ -1,6 +1,6 @@
 module github.com/docker/secrets-engine/x
 
-go 1.25
+go 1.25.8
 
 require (
 	connectrpc.com/connect v1.19.1