diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 0531257..9218af6 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -31,7 +31,7 @@ jobs:
         uses: manusa/actions-setup-minikube@v2.13.0
         with:
           minikube version: 'v1.38.1'
-          kubernetes version: 'v1.35.3'
+          kubernetes version: 'v1.35.8'
           driver: 'docker'
           container runtime: 'docker'
           github token: ${{ secrets.GITHUB_TOKEN }}
@@ -113,7 +113,7 @@ jobs:
       - name: Extract metadata (tags, labels) for Docker
         if: github.repository == 'apache/trafficserver-ingress-controller'
         id: meta
-        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf
+        uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           tags: |
@@ -121,7 +121,7 @@ jobs:
 
       - name: Build and push Docker image
         if: github.repository == 'apache/trafficserver-ingress-controller'
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a
         with:
           context: .
           push: true
@@ -131,7 +131,7 @@ jobs:
 
       - name: Run Trivy vulnerability scanner
         if: github.repository == 'apache/trafficserver-ingress-controller'
-        uses: lhotari/sandboxed-trivy-action@555963036b2012b44c1071508a236e569db28ebb
+        uses: lhotari/sandboxed-trivy-action@f01374b6cc3bf7264ab238293e94f6db7ada6dd0
         with:
           scan-ref: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
           format: 'sarif'
diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml
index 56b3080..2237ccf 100644
--- a/.github/workflows/golangci-lint.yml
+++ b/.github/workflows/golangci-lint.yml
@@ -54,6 +54,6 @@ jobs:
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v7
         with:
-          version: v2.4.0
+          version: v2.9.0
           args: --timeout=10m
 
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index fe830ab..96e2fd3 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -42,7 +42,7 @@ jobs:
         luaVersion: "5.1.5"
     
     # commit for v6
-    - uses: leafo/gh-actions-luarocks@97053c556d6ce2c8e26eb7ac93743437c7af7248
+    - uses: leafo/gh-actions-luarocks@35d062def313a7699a0d513e996bcf4352f05389
 
     - name: Install Busted
       run: |
diff --git a/GO_VERSION b/GO_VERSION
index 4fd1625..ad7c780 100644
--- a/GO_VERSION
+++ b/GO_VERSION
@@ -1 +1 @@
-1.25.11
+1.26.7
diff --git a/README.md b/README.md
index ed3046d..1d0c21b 100644
--- a/README.md
+++ b/README.md
@@ -40,5 +40,5 @@ Card](https://goreportcard.com/badge/github.com/apache/trafficserver-ingress-con
 - Other Packages
   - luasocket 3.0.0
   - redis-lua 2.0.4
-- Tested on Minikube 1.38.1 / Kubernetes 1.35.3
+- Tested on Minikube 1.38.1 / Kubernetes 1.35.8
 
diff --git a/go.mod b/go.mod
index c2a63b0..b2ea56b 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/apache/trafficserver-ingress-controller
 
-go 1.25.11
+go 1.26.7
 
 require (
 	github.com/alicebob/miniredis/v2 v2.31.1