diff --git a/.go-version b/.go-version
index 198ec23ccfc..f1968aa8818 100644
--- a/.go-version
+++ b/.go-version
@@ -1 +1 @@
-1.25.6
+1.25.7
diff --git a/build/dependencies.yaml b/build/dependencies.yaml
index 1824693772d..aaa517ea677 100644
--- a/build/dependencies.yaml
+++ b/build/dependencies.yaml
@@ -150,7 +150,7 @@ dependencies:
   # Golang
   # TODO: this should really be eliminated and controlled by .go-version
   - name: "golang: upstream version"
-    version: 1.25.6
+    version: 1.25.7
     refPaths:
     - path: .go-version
     - path: staging/publishing/rules.yaml
diff --git a/staging/publishing/rules.yaml b/staging/publishing/rules.yaml
index 83247155a65..d2dc5b03cb0 100644
--- a/staging/publishing/rules.yaml
+++ b/staging/publishing/rules.yaml
@@ -2489,4 +2489,4 @@ rules:
       - staging/src/k8s.io/externaljwt
 recursive-delete-patterns:
 - '*/.gitattributes'
-default-go-version: 1.25.6
+default-go-version: 1.25.7