diff --git a/Taskfile.yml b/Taskfile.yml
index 36b3308..eb35b3d 100644
--- a/Taskfile.yml
+++ b/Taskfile.yml
@@ -21,7 +21,7 @@ tasks:
       # renovate: datasource=github-digest depName=golangci-lint lookupName=sagikazarmark/daggerverse currentValue=main
       DAGGER_GOLANGCI_LINT_SHA: ff27cd50f6b4eed2e3753c520632cd6099e1ce52
       # renovate: datasource=docker depName=golang versioning=semver
-      GOLANG_IMAGE_VERSION: 1.26.6
+      GOLANG_IMAGE_VERSION: 1.27.0
       # Without an explicit version, this module defaults to the "latest" golangci-lint
       # image tag, which isn't reproducible across CI runs. Kept in sync with the
       # Makefile's GOLANGCI_LINT_VERSION: same depName/datasource, combined into one PR.
@@ -77,7 +77,7 @@ tasks:
     desc: Run go test
     env:
       # renovate: datasource=docker depName=golang versioning=semver
-      GOLANG_IMAGE_VERSION: 1.26.6
+      GOLANG_IMAGE_VERSION: 1.27.0
       # renovate: datasource=github-digest depName=kubernetes packageName=kubernetes/kubernetes versioning=semver
       K8S_VERSION: 1.36.2
       # Kept in sync with go.mod's sigs.k8s.io/controller-runtime require: same
@@ -256,7 +256,7 @@ tasks:
       - start-kind-cluster
     vars:
       # renovate: datasource=docker depName=golang versioning=semver
-      GOLANG_IMAGE_VERSION: 1.26.6
+      GOLANG_IMAGE_VERSION: 1.27.0
       KUBECONFIG_PATH:
         sh: mktemp -t kubeconfig-XXXXX
     env:
@@ -275,7 +275,7 @@ tasks:
       - build-images
     vars:
       # renovate: datasource=docker depName=golang versioning=semver
-      GOLANG_IMAGE_VERSION: 1.26.6
+      GOLANG_IMAGE_VERSION: 1.27.0
       # rancher/k3s tags look like v1.33.1-k3s1 (upstream k8s version + k3s build number).
       # Without extractVersion, semver treats that "-k3s1" as a prerelease identifier,
       # so every real tag compares as *older* than the bare version stored below and
diff --git a/containers/Dockerfile.plugin b/containers/Dockerfile.plugin
index edf4da5..fc2e0a3 100644
--- a/containers/Dockerfile.plugin
+++ b/containers/Dockerfile.plugin
@@ -1,5 +1,5 @@
 # Build the manager binary
-FROM --platform=$BUILDPLATFORM golang:1.26.6 AS gobuilder
+FROM --platform=$BUILDPLATFORM golang:1.27.0 AS gobuilder
 ARG TARGETOS
 ARG TARGETARCH
 
diff --git a/containers/Dockerfile.sidecar b/containers/Dockerfile.sidecar
index fab17f4..40c8fdf 100644
--- a/containers/Dockerfile.sidecar
+++ b/containers/Dockerfile.sidecar
@@ -6,7 +6,7 @@
 # Pgbackrest is taken from the package available in the official Postgres repo.
 
 # Build the manager binary
-FROM --platform=$BUILDPLATFORM golang:1.26.6 AS gobuilder
+FROM --platform=$BUILDPLATFORM golang:1.27.0 AS gobuilder
 ARG TARGETOS
 ARG TARGETARCH