diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 735f323..33645dd 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -23,15 +23,15 @@ jobs:
     timeout-minutes: 15
     strategy:
       matrix:
-        go-version: [1.25.x]
+        go-version: [1.26.x, 1.27.x]
         os: [ubuntu-latest]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7.0.1
         with:
           persist-credentials: false
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v7.0.0
         with:
           go-version: ${{ matrix.go-version }}
           cache: true
@@ -50,9 +50,9 @@ jobs:
           make
 
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v9
+        uses: golangci/golangci-lint-action@v9.3.0
         with:
-          version: v2.7.2
+          version: v2.13.2
           working-directory: test/files
           args: --config ../../.golangci.yml
 
@@ -60,7 +60,7 @@ jobs:
         run: make CI_TAGS="--tags=noresinit" test
 
       - name: Run govulncheck
-        uses: golang/govulncheck-action@v1
+        uses: golang/govulncheck-action@v1.1.0
         with:
           go-version-input: ${{ matrix.go-version }}
           work-dir: test/files
diff --git a/test/files/go.mod b/test/files/go.mod
index 8ad0c28..0a2aae7 100644
--- a/test/files/go.mod
+++ b/test/files/go.mod
@@ -1,8 +1,8 @@
 module github.com/keybase/node-avdl-compiler/test/files
 
-go 1.24.0
+go 1.26.0
 
-toolchain go1.25.5
+toolchain go1.27.1
 
 require (
 	github.com/keybase/client/go v0.0.0-20251212162511-577ca7a6452f