diff --git a/Dockerfile b/Dockerfile
index e0bee5a..ac3340d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -41,7 +41,7 @@ ARG BINARY=source
 # source: compile touchmark for the target platform on the build platform,
 # with the flags .goreleaser.yaml uses (and -buildvcs=false: the build
 # context has no .git).
-FROM --platform=$BUILDPLATFORM golang:1.27.1-alpine3.24@sha256:8a5910f31396cd4d89662f56c68b3ae31d374308270a1c3bd96672ee5ed43414 AS source
+FROM --platform=$BUILDPLATFORM golang:1.27.2-alpine3.24@sha256:f92b6ef800e499660581efdabdf25d9d817a9d124eaf900924f0504e7e27e12d AS source
 ARG TARGETOS
 ARG TARGETARCH
 ARG VERSION=dev