diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index af5ef0b9..6a14bfde 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -105,7 +105,7 @@ jobs:
       - name: Set up Go (API)
         uses: actions/setup-go@7b8cf10d4e4a01d4992d18a89f4d7dc5a3e6d6f4 # v4
         with:
-          go-version: "1.25.7"
+          go-version: "1.25.8"
       - name: Build API
         run: cd api/; go mod vendor; make build
       - name: Test API
@@ -129,7 +129,7 @@ jobs:
       - name: Set up Go (Libs)
         uses: actions/setup-go@7b8cf10d4e4a01d4992d18a89f4d7dc5a3e6d6f4 # v4
         with:
-          go-version: "1.25.7"
+          go-version: "1.25.8"
       - name: Test Libs
         run: cd libs/; go mod vendor; make test
       - name: golangci-lint - Libs (non-blocking)
@@ -152,7 +152,7 @@ jobs:
       - name: Set up Go (Proxy)
         uses: actions/setup-go@7b8cf10d4e4a01d4992d18a89f4d7dc5a3e6d6f4 # v4
         with:
-          go-version: "1.25.7"
+          go-version: "1.25.8"
       - name: Build Proxy
         run: cd proxy/; go mod vendor; make build
       - name: Test Proxy
@@ -177,7 +177,7 @@ jobs:
       - name: Set up Go (Blocklists)
         uses: actions/setup-go@7b8cf10d4e4a01d4992d18a89f4d7dc5a3e6d6f4 # v4
         with:
-          go-version: "1.25.7"
+          go-version: "1.25.8"
       - name: Build Blocklists
         run: cd blocklists/; go mod vendor; make build
       - name: Test Blocklists
@@ -202,7 +202,7 @@ jobs:
       - name: Set up Go (DNSCheck)
         uses: actions/setup-go@7b8cf10d4e4a01d4992d18a89f4d7dc5a3e6d6f4 # v4
         with:
-          go-version: "1.25.7"
+          go-version: "1.25.8"
       - name: Build DNSCheck
         run: cd dnscheck/; go mod vendor; make build
       - name: golangci-lint - DNSCheck (non-blocking)
diff --git a/api/Dockerfile b/api/Dockerfile
index 84d65d3a..f07cbb39 100644
--- a/api/Dockerfile
+++ b/api/Dockerfile
@@ -1,5 +1,5 @@
 # NOTE: The image should be built from the root of the project (see Makefile)
-FROM golang:1.25.7 AS build
+FROM golang:1.25.8 AS build
 
 WORKDIR /app
 
diff --git a/api/Dockerfile.dev b/api/Dockerfile.dev
index fcb43cec..dc029315 100644
--- a/api/Dockerfile.dev
+++ b/api/Dockerfile.dev
@@ -1,4 +1,4 @@
-FROM golang:1.25.7
+FROM golang:1.25.8
 
 RUN apt update; apt install -y make
 
diff --git a/api/go.mod b/api/go.mod
index 8735bc9f..9f66adf0 100644
--- a/api/go.mod
+++ b/api/go.mod
@@ -1,6 +1,6 @@
 module github.com/ivpn/dns/api
 
-go 1.25.7
+go 1.25.8
 
 require (
 	github.com/AfterShip/email-verifier v1.4.0
diff --git a/blocklists/Dockerfile b/blocklists/Dockerfile
index 0b900b7d..f4f77248 100644
--- a/blocklists/Dockerfile
+++ b/blocklists/Dockerfile
@@ -1,5 +1,5 @@
 # NOTE: The image should be built from the root of the project (see Makefile)
-FROM golang:1.25.7 AS build
+FROM golang:1.25.8 AS build
 
 WORKDIR /app
 
diff --git a/blocklists/Dockerfile.dev b/blocklists/Dockerfile.dev
index 86377977..1feacada 100644
--- a/blocklists/Dockerfile.dev
+++ b/blocklists/Dockerfile.dev
@@ -1,4 +1,4 @@
-FROM golang:1.25.7
+FROM golang:1.25.8
 
 RUN apt update; apt install -y make
 
diff --git a/blocklists/go.mod b/blocklists/go.mod
index 30b53a97..fff1957a 100644
--- a/blocklists/go.mod
+++ b/blocklists/go.mod
@@ -1,6 +1,6 @@
 module github.com/ivpn/dns/blocklists
 
-go 1.25.7
+go 1.25.8
 
 require (
 	github.com/getsentry/sentry-go v0.31.1
diff --git a/dnscheck/Dockerfile b/dnscheck/Dockerfile
index 61d0c68a..096f93d2 100644
--- a/dnscheck/Dockerfile
+++ b/dnscheck/Dockerfile
@@ -1,5 +1,5 @@
 # NOTE: The image should be built from the root of the project (see Makefile)
-FROM golang:1.25.7 AS build
+FROM golang:1.25.8 AS build
 
 WORKDIR /app
 
diff --git a/dnscheck/Dockerfile.dev b/dnscheck/Dockerfile.dev
index da9a12a1..f4bd14f8 100644
--- a/dnscheck/Dockerfile.dev
+++ b/dnscheck/Dockerfile.dev
@@ -1,4 +1,4 @@
-FROM golang:1.25.7
+FROM golang:1.25.8
 
 RUN apt update; apt install -y make
 
diff --git a/dnscheck/go.mod b/dnscheck/go.mod
index c1c543d7..ef3b4181 100644
--- a/dnscheck/go.mod
+++ b/dnscheck/go.mod
@@ -1,6 +1,6 @@
 module github.com/dnscheck
 
-go 1.25.7
+go 1.25.8
 
 require (
 	github.com/go-playground/validator/v10 v10.25.0
diff --git a/libs/go.mod b/libs/go.mod
index 70f73838..8674352c 100644
--- a/libs/go.mod
+++ b/libs/go.mod
@@ -1,6 +1,6 @@
 module github.com/ivpn/dns/libs
 
-go 1.25.7
+go 1.25.8
 
 require (
 	github.com/redis/go-redis/v9 v9.7.3
diff --git a/proxy/Dockerfile b/proxy/Dockerfile
index d3f87e53..c3dd2954 100644
--- a/proxy/Dockerfile
+++ b/proxy/Dockerfile
@@ -1,5 +1,5 @@
 # NOTE: The image should be built from the root of the project (see Makefile)
-FROM golang:1.25.7 AS build
+FROM golang:1.25.8 AS build
 
 WORKDIR /app
 
diff --git a/proxy/Dockerfile.dev b/proxy/Dockerfile.dev
index 4e66bac9..2fcd4279 100644
--- a/proxy/Dockerfile.dev
+++ b/proxy/Dockerfile.dev
@@ -1,4 +1,4 @@
-FROM golang:1.25.7
+FROM golang:1.25.8
 
 RUN apt update; apt install -y make
 
diff --git a/proxy/go.mod b/proxy/go.mod
index 0f5cfcae..b56d910c 100644
--- a/proxy/go.mod
+++ b/proxy/go.mod
@@ -1,6 +1,6 @@
 module github.com/ivpn/dns/proxy
 
-go 1.25.7
+go 1.25.8
 
 require (
 	github.com/AdguardTeam/dnsproxy v0.78.0