diff --git a/internal/gaby/Dockerfile b/internal/gaby/Dockerfile
index aeba63e..818fa3b 100644
--- a/internal/gaby/Dockerfile
+++ b/internal/gaby/Dockerfile
@@ -18,7 +18,9 @@
 #     .
 
 ################################################################
-FROM golang:1.23.0 AS builder
+# Note that the Go version on the next line appears again halfway down this file
+# and in cloudbuild.yaml.
+FROM golang:1.25.0 AS builder
 
 # Set the working directory outside $GOPATH to ensure module mode is enabled.
 WORKDIR /src
@@ -43,7 +45,7 @@
 ################################################################
 # Use a a fresh instance but with less things.
 # Among other benefits, the space savings means more room for /tmp on Cloud Run.
-FROM golang:1.23.0
+FROM golang:1.25.0
 
 LABEL maintainer="Go Oscar Team <oscar-team@google.com>"
 
diff --git a/internal/gaby/cloudbuild.yaml b/internal/gaby/cloudbuild.yaml
index 3beb833..335e121 100644
--- a/internal/gaby/cloudbuild.yaml
+++ b/internal/gaby/cloudbuild.yaml
@@ -1,6 +1,6 @@
 steps:
   - id: Lock
-    name: golang:1.23.0
+    name: golang:1.25.0  # note: Go version also below for Test and in Dockerfile
     entrypoint: bash
     args:
       - -ec
@@ -35,7 +35,7 @@
         fi
 
   - id: Test
-    name: golang:1.23.0
+    name: golang:1.25.0
     entrypoint: bash
     args:
       - -ec