diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7ac0daf5..e1e38d86 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,12 @@
 
 ### Fixed
 
+## 2.3.4
+
+### Fixed
+
+- Builds with Go 1.26.10 so `crypto/x509` rejects certificate chains through the distrusted eMudhra intermediates (INC-289, golang/go#82345). The `toolchain` directive in `go.mod` and the `golang:` builder image in the `Dockerfile` move from 1.26.8 to 1.26.10. There are no application code changes
+
 ## 2.3.3
 
 ### Fixed
diff --git a/README.md b/README.md
index 2c72c87a..f711d27c 100644
--- a/README.md
+++ b/README.md
@@ -114,7 +114,7 @@ jobs:
           environment-key: production
           access-token: ${{ secrets.LD_ACCESS_TOKEN }}
           repo-token: ${{ secrets.GITHUB_TOKEN }}
-          dockerImage: your.registry.example/launchdarkly/find-code-references-in-pull-request:2.3.3
+          dockerImage: your.registry.example/launchdarkly/find-code-references-in-pull-request:2.3.4
 ```
 
 This entry point requires a Docker CLI on the runner (included on GitHub-hosted `ubuntu-*` runners). Existing workflows that use the root Action do not need to change.
diff --git a/docker/action.yml b/docker/action.yml
index 8401c8f6..98b19971 100644
--- a/docker/action.yml
+++ b/docker/action.yml
@@ -55,12 +55,12 @@ inputs:
     description: >-
       Container image to run. Defaults to the public Docker Hub runtime image.
       Set this to your mirrored/proxy image (for example
-      your.registry.example/launchdarkly/find-code-references-in-pull-request:2.3.3).
+      your.registry.example/launchdarkly/find-code-references-in-pull-request:2.3.4).
       Authenticate to private registries with docker/login-action (or equivalent)
       in a prior step. Requires a runner with a Docker CLI (GitHub-hosted
       ubuntu-* runners include one).
     required: false
-    default: "launchdarkly/find-code-references-in-pull-request:2.3.3"
+    default: "launchdarkly/find-code-references-in-pull-request:2.3.4"
 
 outputs:
   any-modified:
diff --git a/internal/version/version.go b/internal/version/version.go
index 62c65bf1..3fa6b5e0 100644
--- a/internal/version/version.go
+++ b/internal/version/version.go
@@ -1,3 +1,3 @@
 package version
 
-const Version = "2.3.3"
+const Version = "2.3.4"