diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 540471c..0dcb22f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -137,7 +137,7 @@ jobs:
         if: ${{ needs.changes.outputs.go == 'true' }}
         uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
-          go-version: "1.27.2"
+          go-version: "1.27.3"
           # This module intentionally has no go.sum yet; setup-go's cache lookup warns on it.
           cache: false
 
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index dc1edf7..90ec1b3 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -90,7 +90,7 @@ jobs:
         if: ${{ steps.selection.outputs.enabled == 'true' && matrix.language == 'go' }}
         uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
-          go-version: "1.27.2"
+          go-version: "1.27.3"
           cache: false
 
       - name: Initialize CodeQL
diff --git a/.github/workflows/execution-runtime-consumer.yml b/.github/workflows/execution-runtime-consumer.yml
index 4544166..730de06 100644
--- a/.github/workflows/execution-runtime-consumer.yml
+++ b/.github/workflows/execution-runtime-consumer.yml
@@ -85,7 +85,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
-          go-version: "1.27.2"
+          go-version: "1.27.3"
           cache: false
 
       - name: Restore
diff --git a/.github/workflows/release-integrity.yml b/.github/workflows/release-integrity.yml
index c347c30..688b023 100644
--- a/.github/workflows/release-integrity.yml
+++ b/.github/workflows/release-integrity.yml
@@ -56,7 +56,7 @@ jobs:
         if: ${{ github.event_name != 'pull_request' }}
         uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
-          go-version: "1.27.2"
+          go-version: "1.27.3"
           cache: false
 
       - name: Install Python release tooling
diff --git a/scripts/verify-version-policy.py b/scripts/verify-version-policy.py
index fd9e9ca..246a817 100755
--- a/scripts/verify-version-policy.py
+++ b/scripts/verify-version-policy.py
@@ -20,7 +20,7 @@
 PYTHON_RUNTIME_VERSION = "0.1.4"
 PYTHON_RUNTIME_FIXTURE_MINIMUM = "0.1.0"
 GO_MINIMUM_VERSION = "1.25.0"
-GO_BUILD_VERSION = "1.27.2"
+GO_BUILD_VERSION = "1.27.3"
 BUBBLEWRAP_BUILD_VERSION = "0.11.2"
 BUBBLEWRAP_BUILD_SHA256 = (
     "69abc30005d2186baf7737feacd8da35633b93cf5af38838ecff17c5f8e924f6"
diff --git a/workers/execution-smoke-go/Dockerfile b/workers/execution-smoke-go/Dockerfile
index 7881861..748825a 100644
--- a/workers/execution-smoke-go/Dockerfile
+++ b/workers/execution-smoke-go/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.27.2@sha256:820153096fda4de6ac1b7194d12e416b7dd8f4e9a33d17e0345b111b945162d8 AS build
+FROM golang:1.27.3@sha256:f20d83a83e18dbd2a4714b8ffd4b30b287b6243962dd75608e86abcc63ba4efc AS build
 
 WORKDIR /src
 COPY clients/go/go.mod ./clients/go/go.mod