diff --git a/cmd/workflow-migrate/Dockerfile b/cmd/workflow-migrate/Dockerfile
index 2d44686..ee3b0a4 100644
--- a/cmd/workflow-migrate/Dockerfile
+++ b/cmd/workflow-migrate/Dockerfile
@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1
 # Build stage — Go version pinned to match go.mod exactly; bump here if go.mod is updated
-FROM --platform=$BUILDPLATFORM golang:1.26.0-alpine AS builder
+FROM --platform=$BUILDPLATFORM golang:1.26.4-alpine AS builder
 ARG TARGETARCH
 WORKDIR /src
 COPY go.mod go.sum ./