diff --git a/cloudbuild.yaml b/cloudbuild.yaml
index f30ad877ab277..ed39e9173a3c1 100644
--- a/cloudbuild.yaml
+++ b/cloudbuild.yaml
@@ -5,7 +5,7 @@ options:
   machineType: "E2_HIGHCPU_32"
 steps:
   # Push the images
-  - name: "mirror.gcr.io/library/golang:1.25.6-trixie"
+  - name: "mirror.gcr.io/library/golang:1.25.7-trixie"
     id: images
     entrypoint: make
     env:
@@ -22,7 +22,7 @@ steps:
       - kube-apiserver-healthcheck-push
       - discovery-server-push
   # Push the artifacts
-  - name: "mirror.gcr.io/library/golang:1.25.6-trixie"
+  - name: "mirror.gcr.io/library/golang:1.25.7-trixie"
     id: artifacts
     entrypoint: make
     env:
@@ -37,7 +37,7 @@ steps:
     args:
       - gcs-upload-and-tag
   # Build cloudbuild artifacts (for attestation)
-  - name: "mirror.gcr.io/library/golang:1.25.6-trixie"
+  - name: "mirror.gcr.io/library/golang:1.25.7-trixie"
     id: cloudbuild-artifacts
     entrypoint: make
     env:
diff --git a/go.mod b/go.mod
index b99de24979b44..fd15479747dd3 100644
--- a/go.mod
+++ b/go.mod
@@ -1,7 +1,7 @@
 module k8s.io/kops
 
 // This should be kept in sync with cloudbuild.yaml and the other go.mod files
-go 1.25.6
+go 1.25.7
 
 godebug default=go1.25
 
diff --git a/hack/go.mod b/hack/go.mod
index 97623eb4b20fc..aed65bf8c9acb 100644
--- a/hack/go.mod
+++ b/hack/go.mod
@@ -1,6 +1,6 @@
 module k8s.io/kops/hack
 
-go 1.25.6
+go 1.25.7
 
 tool (
 	github.com/client9/misspell/cmd/misspell
diff --git a/tests/e2e/go.mod b/tests/e2e/go.mod
index 8d34368535c7f..330af5e1a4e8a 100644
--- a/tests/e2e/go.mod
+++ b/tests/e2e/go.mod
@@ -1,6 +1,6 @@
 module k8s.io/kops/tests/e2e
 
-go 1.25.6
+go 1.25.7
 
 replace k8s.io/kops => ../../.
 
diff --git a/tools/metal/dhcp/go.mod b/tools/metal/dhcp/go.mod
index b3a926c24978a..953a1756aee21 100644
--- a/tools/metal/dhcp/go.mod
+++ b/tools/metal/dhcp/go.mod
@@ -1,6 +1,6 @@
 module github.com/kubernetes/kops/tools/metal/dhcp
 
-go 1.25.6
+go 1.25.7
 
 require github.com/insomniacslk/dhcp v0.0.0-20240812123929-b105c29bd1b5
 
diff --git a/tools/metal/storage/go.mod b/tools/metal/storage/go.mod
index c1c06ffc75861..9e169d558acf6 100644
--- a/tools/metal/storage/go.mod
+++ b/tools/metal/storage/go.mod
@@ -1,6 +1,6 @@
 module github.com/kubernetes/kops/tools/metal/dhcp
 
-go 1.25.6
+go 1.25.7
 
 require (
 	google.golang.org/grpc v1.66.0
diff --git a/tools/otel/traceserver/go.mod b/tools/otel/traceserver/go.mod
index 71b12b961931c..32d445f98da4a 100644
--- a/tools/otel/traceserver/go.mod
+++ b/tools/otel/traceserver/go.mod
@@ -1,6 +1,6 @@
 module k8s.io/kops/tools/otel/traceserver
 
-go 1.25.6
+go 1.25.7
 
 require (
 	go.opentelemetry.io/proto/otlp v1.9.0