diff --git a/dockerfiles/cd/builders/ng-monitoring/Dockerfile b/dockerfiles/cd/builders/ng-monitoring/Dockerfile
index 93ddddff..b63d9b98 100644
--- a/dockerfiles/cd/builders/ng-monitoring/Dockerfile
+++ b/dockerfiles/cd/builders/ng-monitoring/Dockerfile
@@ -20,7 +20,7 @@ RUN --mount=type=cache,target=/var/cache/dnf \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.7
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/ng-monitoring/centos7/Dockerfile b/dockerfiles/cd/builders/ng-monitoring/centos7/Dockerfile
index 9b60c008..7a1b4e1f 100644
--- a/dockerfiles/cd/builders/ng-monitoring/centos7/Dockerfile
+++ b/dockerfiles/cd/builders/ng-monitoring/centos7/Dockerfile
@@ -25,7 +25,7 @@ RUN --mount=type=cache,target=/var/cache/yum \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.7
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/ng-monitoring/skaffold.centos7.non-root.yaml b/dockerfiles/cd/builders/ng-monitoring/skaffold.centos7.non-root.yaml
index fe1dd073..6e966847 100644
--- a/dockerfiles/cd/builders/ng-monitoring/skaffold.centos7.non-root.yaml
+++ b/dockerfiles/cd/builders/ng-monitoring/skaffold.centos7.non-root.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/ng-monitoring/skaffold.centos7.yaml b/dockerfiles/cd/builders/ng-monitoring/skaffold.centos7.yaml
index c2274f78..9173eaf6 100644
--- a/dockerfiles/cd/builders/ng-monitoring/skaffold.centos7.yaml
+++ b/dockerfiles/cd/builders/ng-monitoring/skaffold.centos7.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/ng-monitoring/skaffold.non-root.yaml b/dockerfiles/cd/builders/ng-monitoring/skaffold.non-root.yaml
index eaeddae3..c57b8b92 100644
--- a/dockerfiles/cd/builders/ng-monitoring/skaffold.non-root.yaml
+++ b/dockerfiles/cd/builders/ng-monitoring/skaffold.non-root.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/ng-monitoring/skaffold.yaml b/dockerfiles/cd/builders/ng-monitoring/skaffold.yaml
index cd1460f5..88b62922 100644
--- a/dockerfiles/cd/builders/ng-monitoring/skaffold.yaml
+++ b/dockerfiles/cd/builders/ng-monitoring/skaffold.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/pd/skaffold.centos7.non-root.yaml b/dockerfiles/cd/builders/pd/skaffold.centos7.non-root.yaml
index 89563bb2..a9883b64 100644
--- a/dockerfiles/cd/builders/pd/skaffold.centos7.non-root.yaml
+++ b/dockerfiles/cd/builders/pd/skaffold.centos7.non-root.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/pd/skaffold.centos7.yaml b/dockerfiles/cd/builders/pd/skaffold.centos7.yaml
index 109960b6..d68a06bb 100644
--- a/dockerfiles/cd/builders/pd/skaffold.centos7.yaml
+++ b/dockerfiles/cd/builders/pd/skaffold.centos7.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/pd/skaffold.non-root.yaml b/dockerfiles/cd/builders/pd/skaffold.non-root.yaml
index 56e108f1..af02c39b 100644
--- a/dockerfiles/cd/builders/pd/skaffold.non-root.yaml
+++ b/dockerfiles/cd/builders/pd/skaffold.non-root.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/pd/skaffold.yaml b/dockerfiles/cd/builders/pd/skaffold.yaml
index 9a47daae..40b0a294 100644
--- a/dockerfiles/cd/builders/pd/skaffold.yaml
+++ b/dockerfiles/cd/builders/pd/skaffold.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tem/Dockerfile b/dockerfiles/cd/builders/tem/Dockerfile
index 8e7f717a..32006a7d 100644
--- a/dockerfiles/cd/builders/tem/Dockerfile
+++ b/dockerfiles/cd/builders/tem/Dockerfile
@@ -36,7 +36,7 @@ ENV PATH=/usr/local/bin/buf/bin/:$PATH
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.7
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/tem/skaffold.non-root.yaml b/dockerfiles/cd/builders/tem/skaffold.non-root.yaml
index f66fd002..d7a7cda2 100644
--- a/dockerfiles/cd/builders/tem/skaffold.non-root.yaml
+++ b/dockerfiles/cd/builders/tem/skaffold.non-root.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tem/skaffold.yaml b/dockerfiles/cd/builders/tem/skaffold.yaml
index 5246186c..b8e9728e 100644
--- a/dockerfiles/cd/builders/tem/skaffold.yaml
+++ b/dockerfiles/cd/builders/tem/skaffold.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/ticdc/Dockerfile b/dockerfiles/cd/builders/ticdc/Dockerfile
index 25a238b8..5a704fa5 100644
--- a/dockerfiles/cd/builders/ticdc/Dockerfile
+++ b/dockerfiles/cd/builders/ticdc/Dockerfile
@@ -19,7 +19,7 @@ RUN --mount=type=cache,target=/var/cache/dnf \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.7
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/ticdc/centos7/Dockerfile b/dockerfiles/cd/builders/ticdc/centos7/Dockerfile
index 0604f741..f353f68c 100644
--- a/dockerfiles/cd/builders/ticdc/centos7/Dockerfile
+++ b/dockerfiles/cd/builders/ticdc/centos7/Dockerfile
@@ -27,7 +27,7 @@ RUN --mount=type=cache,target=/var/cache/yum \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.7
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/ticdc/skaffold.centos7.non-root.yaml b/dockerfiles/cd/builders/ticdc/skaffold.centos7.non-root.yaml
index f9ecd46b..6fb83d6a 100644
--- a/dockerfiles/cd/builders/ticdc/skaffold.centos7.non-root.yaml
+++ b/dockerfiles/cd/builders/ticdc/skaffold.centos7.non-root.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/ticdc/skaffold.centos7.yaml b/dockerfiles/cd/builders/ticdc/skaffold.centos7.yaml
index bd1468a5..223e5e77 100644
--- a/dockerfiles/cd/builders/ticdc/skaffold.centos7.yaml
+++ b/dockerfiles/cd/builders/ticdc/skaffold.centos7.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/ticdc/skaffold.non-root.yaml b/dockerfiles/cd/builders/ticdc/skaffold.non-root.yaml
index 8cbaa360..14215318 100644
--- a/dockerfiles/cd/builders/ticdc/skaffold.non-root.yaml
+++ b/dockerfiles/cd/builders/ticdc/skaffold.non-root.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/ticdc/skaffold.yaml b/dockerfiles/cd/builders/ticdc/skaffold.yaml
index 2c342e80..ecfb55d5 100644
--- a/dockerfiles/cd/builders/ticdc/skaffold.yaml
+++ b/dockerfiles/cd/builders/ticdc/skaffold.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidb-dashboard/Dockerfile b/dockerfiles/cd/builders/tidb-dashboard/Dockerfile
index 2c8b68eb..c9656e42 100644
--- a/dockerfiles/cd/builders/tidb-dashboard/Dockerfile
+++ b/dockerfiles/cd/builders/tidb-dashboard/Dockerfile
@@ -20,7 +20,7 @@ RUN --mount=type=cache,target=/var/cache/dnf \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.7
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/tidb-dashboard/centos7/Dockerfile b/dockerfiles/cd/builders/tidb-dashboard/centos7/Dockerfile
index 24c705f3..3db960ba 100644
--- a/dockerfiles/cd/builders/tidb-dashboard/centos7/Dockerfile
+++ b/dockerfiles/cd/builders/tidb-dashboard/centos7/Dockerfile
@@ -23,7 +23,7 @@ RUN --mount=type=cache,target=/var/cache/yum \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.7
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/tidb-dashboard/skaffold.centos7.non-root.yaml b/dockerfiles/cd/builders/tidb-dashboard/skaffold.centos7.non-root.yaml
index 23c0c267..66f8d825 100644
--- a/dockerfiles/cd/builders/tidb-dashboard/skaffold.centos7.non-root.yaml
+++ b/dockerfiles/cd/builders/tidb-dashboard/skaffold.centos7.non-root.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidb-dashboard/skaffold.centos7.yaml b/dockerfiles/cd/builders/tidb-dashboard/skaffold.centos7.yaml
index 6225db02..8d232409 100644
--- a/dockerfiles/cd/builders/tidb-dashboard/skaffold.centos7.yaml
+++ b/dockerfiles/cd/builders/tidb-dashboard/skaffold.centos7.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidb-dashboard/skaffold.non-root.yaml b/dockerfiles/cd/builders/tidb-dashboard/skaffold.non-root.yaml
index a5f97bd3..04ba3f2a 100644
--- a/dockerfiles/cd/builders/tidb-dashboard/skaffold.non-root.yaml
+++ b/dockerfiles/cd/builders/tidb-dashboard/skaffold.non-root.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidb-dashboard/skaffold.yaml b/dockerfiles/cd/builders/tidb-dashboard/skaffold.yaml
index 4e1c0b3c..e80245e9 100644
--- a/dockerfiles/cd/builders/tidb-dashboard/skaffold.yaml
+++ b/dockerfiles/cd/builders/tidb-dashboard/skaffold.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidb-operator/Dockerfile b/dockerfiles/cd/builders/tidb-operator/Dockerfile
index b0d81d38..71c1bf91 100644
--- a/dockerfiles/cd/builders/tidb-operator/Dockerfile
+++ b/dockerfiles/cd/builders/tidb-operator/Dockerfile
@@ -8,7 +8,7 @@
 #   - docker build -t tidb-operator -f Dockerfile ./tidb-operator
 
 ########### stage: builder
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.7
 FROM golang:${GOLANG_VERSION} AS builder
 LABEL org.opencontainers.image.authors="wuhui.zuo@pingcap.com"
 LABEL org.opencontainers.image.description="binary builder for TiDB Operator"
diff --git a/dockerfiles/cd/builders/tidb-operator/skaffold.non-root.yaml b/dockerfiles/cd/builders/tidb-operator/skaffold.non-root.yaml
index 50dc9caf..7c8df7ab 100644
--- a/dockerfiles/cd/builders/tidb-operator/skaffold.non-root.yaml
+++ b/dockerfiles/cd/builders/tidb-operator/skaffold.non-root.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidb-operator/skaffold.yaml b/dockerfiles/cd/builders/tidb-operator/skaffold.yaml
index e97b77a2..5a752e42 100644
--- a/dockerfiles/cd/builders/tidb-operator/skaffold.yaml
+++ b/dockerfiles/cd/builders/tidb-operator/skaffold.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidb/Dockerfile b/dockerfiles/cd/builders/tidb/Dockerfile
index 6e8da45b..4881a833 100644
--- a/dockerfiles/cd/builders/tidb/Dockerfile
+++ b/dockerfiles/cd/builders/tidb/Dockerfile
@@ -20,7 +20,7 @@ RUN --mount=type=cache,target=/var/cache/dnf \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.7
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/tidb/centos7/Dockerfile b/dockerfiles/cd/builders/tidb/centos7/Dockerfile
index bbc6fd8d..eb5ac84d 100644
--- a/dockerfiles/cd/builders/tidb/centos7/Dockerfile
+++ b/dockerfiles/cd/builders/tidb/centos7/Dockerfile
@@ -43,7 +43,7 @@ RUN --mount=type=cache,target=/var/cache/yum \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.7
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/tidb/skaffold.centos7.non-root.yaml b/dockerfiles/cd/builders/tidb/skaffold.centos7.non-root.yaml
index d182b421..b9fafc55 100644
--- a/dockerfiles/cd/builders/tidb/skaffold.centos7.non-root.yaml
+++ b/dockerfiles/cd/builders/tidb/skaffold.centos7.non-root.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidb/skaffold.centos7.yaml b/dockerfiles/cd/builders/tidb/skaffold.centos7.yaml
index 33103493..48e0b7fe 100644
--- a/dockerfiles/cd/builders/tidb/skaffold.centos7.yaml
+++ b/dockerfiles/cd/builders/tidb/skaffold.centos7.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidb/skaffold.non-root.yaml b/dockerfiles/cd/builders/tidb/skaffold.non-root.yaml
index 76782f12..9605f75e 100644
--- a/dockerfiles/cd/builders/tidb/skaffold.non-root.yaml
+++ b/dockerfiles/cd/builders/tidb/skaffold.non-root.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidb/skaffold.yaml b/dockerfiles/cd/builders/tidb/skaffold.yaml
index be9fabd4..18cd5ac0 100644
--- a/dockerfiles/cd/builders/tidb/skaffold.yaml
+++ b/dockerfiles/cd/builders/tidb/skaffold.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidbx/centos7/Dockerfile b/dockerfiles/cd/builders/tidbx/centos7/Dockerfile
index 8e76df93..6eba0eda 100644
--- a/dockerfiles/cd/builders/tidbx/centos7/Dockerfile
+++ b/dockerfiles/cd/builders/tidbx/centos7/Dockerfile
@@ -18,7 +18,7 @@ RUN --mount=type=cache,target=/var/cache/yum \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.7
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/tidbx/skaffold.centos7.non-root.yaml b/dockerfiles/cd/builders/tidbx/skaffold.centos7.non-root.yaml
index 37872adc..19c9ce47 100644
--- a/dockerfiles/cd/builders/tidbx/skaffold.centos7.non-root.yaml
+++ b/dockerfiles/cd/builders/tidbx/skaffold.centos7.non-root.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidbx/skaffold.centos7.yaml b/dockerfiles/cd/builders/tidbx/skaffold.centos7.yaml
index 7326a076..df569ac3 100644
--- a/dockerfiles/cd/builders/tidbx/skaffold.centos7.yaml
+++ b/dockerfiles/cd/builders/tidbx/skaffold.centos7.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tiflow/Dockerfile b/dockerfiles/cd/builders/tiflow/Dockerfile
index 8bf7fb03..da032c9d 100644
--- a/dockerfiles/cd/builders/tiflow/Dockerfile
+++ b/dockerfiles/cd/builders/tiflow/Dockerfile
@@ -15,7 +15,7 @@ RUN --mount=type=cache,target=/var/cache/dnf \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.7
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/tiflow/centos7/Dockerfile b/dockerfiles/cd/builders/tiflow/centos7/Dockerfile
index 2e0d0d96..a8e04b43 100644
--- a/dockerfiles/cd/builders/tiflow/centos7/Dockerfile
+++ b/dockerfiles/cd/builders/tiflow/centos7/Dockerfile
@@ -24,7 +24,7 @@ RUN --mount=type=cache,target=/var/cache/yum \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.7
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/tiflow/skaffold.centos7.non-root.yaml b/dockerfiles/cd/builders/tiflow/skaffold.centos7.non-root.yaml
index 61be8b24..5fe3d452 100644
--- a/dockerfiles/cd/builders/tiflow/skaffold.centos7.non-root.yaml
+++ b/dockerfiles/cd/builders/tiflow/skaffold.centos7.non-root.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tiflow/skaffold.centos7.yaml b/dockerfiles/cd/builders/tiflow/skaffold.centos7.yaml
index 34009931..cde7045e 100644
--- a/dockerfiles/cd/builders/tiflow/skaffold.centos7.yaml
+++ b/dockerfiles/cd/builders/tiflow/skaffold.centos7.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tiflow/skaffold.non-root.yaml b/dockerfiles/cd/builders/tiflow/skaffold.non-root.yaml
index d78fdc2f..9c0db389 100644
--- a/dockerfiles/cd/builders/tiflow/skaffold.non-root.yaml
+++ b/dockerfiles/cd/builders/tiflow/skaffold.non-root.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tiflow/skaffold.yaml b/dockerfiles/cd/builders/tiflow/skaffold.yaml
index a01f4f20..fe46e41b 100644
--- a/dockerfiles/cd/builders/tiflow/skaffold.yaml
+++ b/dockerfiles/cd/builders/tiflow/skaffold.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.7
   - name: go-1.25
     patches:
       - op: replace