diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 71bd392..2e865b4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -65,7 +65,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: open-cli-collective/.github/actions/go-lint@v1
+      - uses: open-cli-collective/.github/actions/go-lint@b816e09a862eec83f6ff334f94d6b96894f405ad # Go 1.27 support
         with:
           go-version-file: go.mod
 
diff --git a/.github/workflows/release-build-check.yml b/.github/workflows/release-build-check.yml
index b4b50c5..2773ab0 100644
--- a/.github/workflows/release-build-check.yml
+++ b/.github/workflows/release-build-check.yml
@@ -27,7 +27,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version-file: go.mod
       - name: Install GoReleaser
diff --git a/go.mod b/go.mod
index f009129..0b7f48d 100644
--- a/go.mod
+++ b/go.mod
@@ -2,7 +2,7 @@ module github.com/open-cli-collective/spotify-cli
 
 go 1.26
 
-toolchain go1.26.10
+toolchain go1.27.4
 
 require (
 	github.com/charmbracelet/huh v0.8.0