diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ff5a11a..2103a9e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -137,7 +137,7 @@ jobs:
         if: ${{ needs.changes.outputs.go == 'true' }}
         uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
-          go-version: "1.27.1"
+          go-version: "1.27.2"
           # This module intentionally has no go.sum yet; setup-go's cache lookup warns on it.
           cache: false
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 8621d82..0cfce58 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -90,7 +90,7 @@ jobs:
         if: ${{ steps.selection.outputs.enabled == 'true' && matrix.language == 'go' }}
         uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
-          go-version: "1.27.1"
+          go-version: "1.27.2"
           cache: false
 
       - name: Initialize CodeQL
diff --git a/.github/workflows/execution-runtime-consumer.yml b/.github/workflows/execution-runtime-consumer.yml
index d8ac870..9abc772 100644
--- a/.github/workflows/execution-runtime-consumer.yml
+++ b/.github/workflows/execution-runtime-consumer.yml
@@ -85,7 +85,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
-          go-version: "1.27.1"
+          go-version: "1.27.2"
           cache: false
 
       - name: Restore
diff --git a/.github/workflows/release-integrity.yml b/.github/workflows/release-integrity.yml
index b420b7b..4ea846d 100644
--- a/.github/workflows/release-integrity.yml
+++ b/.github/workflows/release-integrity.yml
@@ -56,7 +56,7 @@ jobs:
         if: ${{ github.event_name != 'pull_request' }}
         uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
-          go-version: "1.27.1"
+          go-version: "1.27.2"
           cache: false
 
       - name: Install Python release tooling
diff --git a/scripts/verify-version-policy.py b/scripts/verify-version-policy.py
index 1c94a60..fd9e9ca 100755
--- a/scripts/verify-version-policy.py
+++ b/scripts/verify-version-policy.py
@@ -20,7 +20,7 @@
 PYTHON_RUNTIME_VERSION = "0.1.4"
 PYTHON_RUNTIME_FIXTURE_MINIMUM = "0.1.0"
 GO_MINIMUM_VERSION = "1.25.0"
-GO_BUILD_VERSION = "1.27.1"
+GO_BUILD_VERSION = "1.27.2"
 BUBBLEWRAP_BUILD_VERSION = "0.11.2"
 BUBBLEWRAP_BUILD_SHA256 = (
     "69abc30005d2186baf7737feacd8da35633b93cf5af38838ecff17c5f8e924f6"
diff --git a/workers/execution-smoke-go/Dockerfile b/workers/execution-smoke-go/Dockerfile
index 01ee87d..20dc524 100644
--- a/workers/execution-smoke-go/Dockerfile
+++ b/workers/execution-smoke-go/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.27.1@sha256:512690a5660563b57d37ecc31129e7f136e831db2aed24a1dbeb8ad7380dc0fa AS build
+FROM golang:1.27.2@sha256:5bc7f572bbaa98885a3a1fd9c0aa76b59e3e14e8628bfc316bbfd0c701e4818c AS build
 
 WORKDIR /src
 COPY clients/go/go.mod ./clients/go/go.mod