diff --git a/client/go.mod b/client/go.mod
index 2742387a..57c2716d 100644
--- a/client/go.mod
+++ b/client/go.mod
@@ -1,6 +1,6 @@
 module github.com/docker/secrets-engine/client
 
-go 1.26.8
+go 1.26.9
 
 // This `replace` is only for CI to function.
 // The correct version will get resolved from below when this module is
diff --git a/go.work b/go.work
index ef70c7d3..c85af4bf 100644
--- a/go.work
+++ b/go.work
@@ -1,4 +1,4 @@
-go 1.26.8
+go 1.26.9
 
 use (
 	./client
diff --git a/plugin/go.mod b/plugin/go.mod
index 36bb1af3..d88e957b 100644
--- a/plugin/go.mod
+++ b/plugin/go.mod
@@ -1,6 +1,6 @@
 module github.com/docker/secrets-engine/plugin
 
-go 1.26.8
+go 1.26.9
 
 // This `replace` is only for CI to function.
 // The correct version will get resolved from below when this module is
diff --git a/plugins/credentialhelper/go.mod b/plugins/credentialhelper/go.mod
index a00bac86..e4b4d021 100644
--- a/plugins/credentialhelper/go.mod
+++ b/plugins/credentialhelper/go.mod
@@ -1,6 +1,6 @@
 module github.com/docker/secrets-engine/plugins/credentialhelper
 
-go 1.26.8
+go 1.26.9
 
 // This `replace` is only for CI to function.
 // The correct version will get resolved from below when this module is
diff --git a/plugins/pass/go.mod b/plugins/pass/go.mod
index 9895c9cb..3b6c4cec 100644
--- a/plugins/pass/go.mod
+++ b/plugins/pass/go.mod
@@ -1,6 +1,6 @@
 module github.com/docker/secrets-engine/plugins/pass
 
-go 1.26.8
+go 1.26.9
 
 replace github.com/docker/secrets-engine/client => ./../../client
 
diff --git a/store/docker-bake.hcl b/store/docker-bake.hcl
index 2be286d6..689adc0c 100644
--- a/store/docker-bake.hcl
+++ b/store/docker-bake.hcl
@@ -25,7 +25,7 @@ group "default" {
 }
 
 variable "GO_VERSION" {
-  default = "1.26.8"
+  default = "1.26.9"
 }
 
 target "fedora_43_gnome_keyring" {
diff --git a/store/go.mod b/store/go.mod
index af7dbea1..e4b8342b 100644
--- a/store/go.mod
+++ b/store/go.mod
@@ -1,6 +1,6 @@
 module github.com/docker/secrets-engine/store
 
-go 1.26.8
+go 1.26.9
 
 // This `replace` is only for CI to function.
 // The correct version will get resolved from below when this module is
diff --git a/vendor/modules.txt b/vendor/modules.txt
index 57bd2b40..d7790f6f 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -40,13 +40,13 @@ github.com/davecgh/go-spew/spew
 github.com/docker/docker-credential-helpers/client
 github.com/docker/docker-credential-helpers/credentials
 # github.com/docker/secrets-engine/client v0.2.0 => ./client
-## explicit; go 1.26.8
+## explicit; go 1.26.9
 # github.com/docker/secrets-engine/plugin v0.3.2 => ./plugin
-## explicit; go 1.26.8
+## explicit; go 1.26.9
 # github.com/docker/secrets-engine/store v0.4.1 => ./store
-## explicit; go 1.26.8
+## explicit; go 1.26.9
 # github.com/docker/secrets-engine/x v0.8.3 => ./x
-## explicit; go 1.26.8
+## explicit; go 1.26.9
 # github.com/godbus/dbus/v5 v5.1.0
 ## explicit; go 1.12
 github.com/godbus/dbus/v5
diff --git a/x/go.mod b/x/go.mod
index da75bf1f..9f550879 100644
--- a/x/go.mod
+++ b/x/go.mod
@@ -1,6 +1,6 @@
 module github.com/docker/secrets-engine/x
 
-go 1.26.8
+go 1.26.9
 
 require (
 	connectrpc.com/connect v1.19.1