diff --git a/k8s/infra/forgejo-runner/values.yaml b/k8s/infra/forgejo-runner/values.yaml
index 38dda1e..8c73d60 100644
--- a/k8s/infra/forgejo-runner/values.yaml
+++ b/k8s/infra/forgejo-runner/values.yaml
@@ -9,7 +9,7 @@ runner:
   # instance carries the golang toolchain and its own dind sidecar builds and
   # pushes that repo's images too -- there is no separate generic runner
   # anymore.
-  labels: "golang:docker://golang:1.25-bookworm"
+  labels: "golang:docker://golang:1.26-bookworm"
   # In-cluster Service (:3000) — direct, avoids the ingress/public-hostname hop
   # (the public URL is :443 which forgejo doesn't serve; runner got i/o timeout).
   forgejoUrl: http://forgejo-gitea-http.cicd.svc.cluster.local:3000