diff --git a/examples/go.mod b/examples/go.mod
index c90825c46b..7c524f2fe7 100644
--- a/examples/go.mod
+++ b/examples/go.mod
@@ -2,7 +2,7 @@ module github.com/opentdf/platform/examples
 
 go 1.25.0
 
-toolchain go1.25.7
+toolchain go1.25.8
 
 require (
 	connectrpc.com/connect v1.19.1
diff --git a/go.work b/go.work
index e0f9dd6636..f897f17ac1 100644
--- a/go.work
+++ b/go.work
@@ -1,5 +1,7 @@
 go 1.25.0
 
+toolchain go1.25.8
+
 use (
 	./examples
 	./lib/fixtures
diff --git a/lib/fixtures/go.mod b/lib/fixtures/go.mod
index cc63a034c8..caf99bf130 100644
--- a/lib/fixtures/go.mod
+++ b/lib/fixtures/go.mod
@@ -2,7 +2,7 @@ module github.com/opentdf/platform/lib/fixtures
 
 go 1.25.0
 
-toolchain go1.25.7
+toolchain go1.25.8
 
 require github.com/Nerzal/gocloak/v13 v13.9.0
 
diff --git a/lib/flattening/go.mod b/lib/flattening/go.mod
index 4646b6a371..3551c144f8 100644
--- a/lib/flattening/go.mod
+++ b/lib/flattening/go.mod
@@ -2,7 +2,7 @@ module github.com/opentdf/platform/lib/flattening
 
 go 1.25.0
 
-toolchain go1.25.7
+toolchain go1.25.8
 
 require github.com/stretchr/testify v1.10.0
 
diff --git a/lib/identifier/go.mod b/lib/identifier/go.mod
index 59321a9fbf..cabc7b781b 100644
--- a/lib/identifier/go.mod
+++ b/lib/identifier/go.mod
@@ -2,7 +2,7 @@ module github.com/opentdf/platform/lib/identifier
 
 go 1.25.0
 
-toolchain go1.25.7
+toolchain go1.25.8
 
 require github.com/stretchr/testify v1.10.0
 
diff --git a/lib/ocrypto/go.mod b/lib/ocrypto/go.mod
index 5b4e611403..8328aa0e4c 100644
--- a/lib/ocrypto/go.mod
+++ b/lib/ocrypto/go.mod
@@ -2,7 +2,7 @@ module github.com/opentdf/platform/lib/ocrypto
 
 go 1.25.0
 
-toolchain go1.25.7
+toolchain go1.25.8
 
 require (
 	github.com/stretchr/testify v1.10.0
diff --git a/protocol/go/go.mod b/protocol/go/go.mod
index beb27bfe72..f31c365baa 100644
--- a/protocol/go/go.mod
+++ b/protocol/go/go.mod
@@ -2,7 +2,7 @@ module github.com/opentdf/platform/protocol/go
 
 go 1.25.0
 
-toolchain go1.25.7
+toolchain go1.25.8
 
 require (
 	buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.34.1-20240508200655-46a4cf4ba109.1
diff --git a/sdk/go.mod b/sdk/go.mod
index 6d47154181..e4fe03dfe5 100644
--- a/sdk/go.mod
+++ b/sdk/go.mod
@@ -2,7 +2,7 @@ module github.com/opentdf/platform/sdk
 
 go 1.25.0
 
-toolchain go1.25.7
+toolchain go1.25.8
 
 require (
 	connectrpc.com/connect v1.19.1
diff --git a/service/go.mod b/service/go.mod
index e4d911657a..0644e03389 100644
--- a/service/go.mod
+++ b/service/go.mod
@@ -2,7 +2,7 @@ module github.com/opentdf/platform/service
 
 go 1.25.0
 
-toolchain go1.25.7
+toolchain go1.25.8
 
 require (
 	buf.build/go/protovalidate v1.0.0
diff --git a/tests-bdd/go.mod b/tests-bdd/go.mod
index 49401ff4b1..40c08a3796 100644
--- a/tests-bdd/go.mod
+++ b/tests-bdd/go.mod
@@ -2,7 +2,7 @@ module github.com/opentdf/platform/tests-bdd
 
 go 1.25.0
 
-toolchain go1.25.7
+toolchain go1.25.8
 
 require (
 	github.com/cucumber/godog v0.15.0