diff --git a/docker/Dockerfile.backend b/docker/Dockerfile.backend
index 7ebbe4d..bb972f6 100644
--- a/docker/Dockerfile.backend
+++ b/docker/Dockerfile.backend
@@ -1,5 +1,5 @@
 # Build stage: server binary + palette-indexer + deterministic palette.db
-FROM golang:1.26.3-alpine AS builder
+FROM golang:1.26.4-alpine AS builder
 
 ARG SERVICE_CMD=./cmd/server
 
diff --git a/docker/Dockerfile.backend-spiffe b/docker/Dockerfile.backend-spiffe
index c0f282e..1fc0531 100644
--- a/docker/Dockerfile.backend-spiffe
+++ b/docker/Dockerfile.backend-spiffe
@@ -5,7 +5,7 @@ FROM ghcr.io/spiffe/spire-agent:1.15.0 AS spire-agent
 FROM ghcr.io/spiffe/spire-server:1.15.0 AS spire-server
 
 # Build backend
-FROM golang:1.26.3-alpine AS backend-builder
+FROM golang:1.26.4-alpine AS backend-builder
 
 ARG SERVICE_CMD=./cmd/server
 
diff --git a/docker/Dockerfile.demo-client b/docker/Dockerfile.demo-client
index 0f12f8e..fce6994 100644
--- a/docker/Dockerfile.demo-client
+++ b/docker/Dockerfile.demo-client
@@ -4,7 +4,7 @@
 # - Makes mTLS calls to other services
 # - Demonstrates JWT-SVID API authentication
 
-FROM golang:1.26.3-alpine AS builder
+FROM golang:1.26.4-alpine AS builder
 
 WORKDIR /app
 
diff --git a/docker/Dockerfile.demo-service b/docker/Dockerfile.demo-service
index a335ecd..41741da 100644
--- a/docker/Dockerfile.demo-service
+++ b/docker/Dockerfile.demo-service
@@ -4,7 +4,7 @@
 # - Validates incoming JWT-SVIDs
 # - Shows certificate rotation in action
 
-FROM golang:1.26.3-alpine AS builder
+FROM golang:1.26.4-alpine AS builder
 
 WORKDIR /app
 
diff --git a/docker/Dockerfile.fly b/docker/Dockerfile.fly
index 1367901..af56a74 100644
--- a/docker/Dockerfile.fly
+++ b/docker/Dockerfile.fly
@@ -27,7 +27,7 @@ RUN npm run build
 # ============================================
 # Stage 2: Build Backend + palette index
 # ============================================
-FROM golang:1.26.3-alpine AS backend-builder
+FROM golang:1.26.4-alpine AS backend-builder
 
 WORKDIR /app
 
diff --git a/docker/Dockerfile.spire-server.fly b/docker/Dockerfile.spire-server.fly
index 4b26087..2cf1584 100644
--- a/docker/Dockerfile.spire-server.fly
+++ b/docker/Dockerfile.spire-server.fly
@@ -9,7 +9,7 @@
 FROM ghcr.io/spiffe/spire-server:1.15.0 AS spire-base
 
 # Build health check server
-FROM golang:1.26.3-alpine AS health-builder
+FROM golang:1.26.4-alpine AS health-builder
 WORKDIR /app
 COPY docker/spire/server-fly/health-server.go .
 RUN CGO_ENABLED=0 go build -o health-server health-server.go
diff --git a/docker/Dockerfile.wallet-harness b/docker/Dockerfile.wallet-harness
index 16105b5..bb3b250 100644
--- a/docker/Dockerfile.wallet-harness
+++ b/docker/Dockerfile.wallet-harness
@@ -11,7 +11,7 @@ COPY wallet-ui/ ./wallet-ui/
 RUN mkdir -p /repo/backend/cmd/walletharness/static
 RUN cd wallet-ui && npm run build
 
-FROM golang:1.26.3-alpine AS builder
+FROM golang:1.26.4-alpine AS builder
 
 WORKDIR /app