diff --git a/.github/workflows/builder.yml b/.github/workflows/builder.yml
index 3fd8de2..c5374d1 100644
--- a/.github/workflows/builder.yml
+++ b/.github/workflows/builder.yml
@@ -5,10 +5,10 @@ on:
     inputs:
       builder-tag:
         description: golang cross builder tag name
-        default: v1.25.5-0
+        default: v1.25.6-0
       golang-version:
         description: golang version
-        default: "1.25.5"
+        default: "1.25.6"
       osxcross-git-hash:
         description: git commit hash of osx-cross project
         default: "ff8d100f3f026b4ffbe4ce96d8aac4ce06f1278b"
diff --git a/Dockerfile b/Dockerfile
index f4cd7bd..2101144 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 ARG OS_CODENAME=bookworm
 
-FROM ghcr.io/gythialy/golang-cross-builder:v1.25.5-0-${OS_CODENAME:-trixie}
+FROM ghcr.io/gythialy/golang-cross-builder:v1.25.6-0-${OS_CODENAME:-trixie}
 
 LABEL maintainer="Goren G<gythialy.koo+github@gmail.com>"
 LABEL org.opencontainers.image.source=https://github.com/gythialy/golang-cross
@@ -8,8 +8,8 @@ LABEL org.opencontainers.image.source=https://github.com/gythialy/golang-cross
 COPY entrypoint.sh /
 
 # install cosign
-ARG COSIGN_VERSION=v3.0.2
-ARG COSIGN_SHA=46dbdcb5467a3dfec2526923d0b3365e40c8d9dc00ec23d5aca3437449e8cbfd
+ARG COSIGN_VERSION=v3.0.4
+ARG COSIGN_SHA=10dab2fd2170b5aa0d5c0673a9a2793304960220b314f6a873bf39c2f08287aa
 RUN \
 	COSIGN_DOWNLOAD_FILE=cosign-linux-amd64 && \
 	wget -O $COSIGN_DOWNLOAD_FILE https://github.com/sigstore/cosign/releases/download/${COSIGN_VERSION}/${COSIGN_DOWNLOAD_FILE} && \
@@ -19,8 +19,8 @@ RUN \
 	cosign version
 
 # install syft
-ARG SYFT_VERSION=v1.37.0
-ARG SYFT_SHA=b81a0dc81b92265f4597659bba5509e014c78228182804bb1bc97856af26e326
+ARG SYFT_VERSION=v1.40.1
+ARG SYFT_SHA=c229137c919f22aa926c1c015388db5ec64e99c078e0baac053808e8f36e2e00
 RUN  \
 	SYFT_DOWNLOAD_FILE=syft_${SYFT_VERSION#v}_linux_amd64.tar.gz && \
 	SYFT_DOWNLOAD_URL=https://github.com/anchore/syft/releases/download/${SYFT_VERSION}/${SYFT_DOWNLOAD_FILE} && \
@@ -29,8 +29,8 @@ RUN  \
 	tar -xzf $SYFT_DOWNLOAD_FILE -C /usr/bin/ syft && \
 	rm $SYFT_DOWNLOAD_FILE
 
-ARG GO_VERSION=go1.25.5
-ARG GOLANG_DIST_SHA=9e9b755d63b36acf30c12a9a3fc379243714c1c6d3dd72861da637f336ebb35b
+ARG GO_VERSION=go1.25.6
+ARG GOLANG_DIST_SHA=f022b6aad78e362bcba9b0b94d09ad58c5a70c6ba3b7582905fababf5fe0181a
 # update golang
 RUN \
 	GOLANG_DIST=https://go.dev/dl/${GO_VERSION}.linux-amd64.tar.gz && \
@@ -42,8 +42,8 @@ RUN \
 	go version
 
 # install goreleaser
-ARG GORELEASER_VERSION=v2.12.7
-ARG GORELEASER_SHA=de95c5d1e728e18753c3ddcf02974d63d6432f0a7355a5afa6813971a95a01b8
+ARG GORELEASER_VERSION=v2.13.3
+ARG GORELEASER_SHA=4b66f2f78f78561330350651ade557b70328664718490f37834749073af21d20
 # RUN \
 # 		wget https://github.com/goreleaser/goreleaser/releases/download/$GORELEASER_VERSION/checksums.txt.pem && \
 # 		cosign verify-blob --certificate checksums.txt.pem --signature https://github.com/goreleaser/goreleaser/releases/download/$GORELEASER_VERSION/checksums.txt.sig https://github.com/goreleaser/goreleaser/releases/download/$GORELEASER_VERSION/checksums.txt && \
@@ -58,8 +58,8 @@ RUN  \
 	goreleaser -v
 
 # install ko
-ARG KO_VERSION=v0.18.0
-ARG KO_SHA=ce8c8776b243357e0a822c279b06c34302460221e834765dee5f4e9e2c0b7b38
+ARG KO_VERSION=v0.18.1
+ARG KO_SHA=048ab11818089a43b7b74bc554494a79a3fd0d9822c061142e5cd3cf8b30cb27
 RUN  \
 	KO_DOWNLOAD_FILE=ko_${KO_VERSION#v}_Linux_x86_64.tar.gz && \
 	KO_DOWNLOAD_URL=https://github.com/ko-build/ko/releases/download/${KO_VERSION}/${KO_DOWNLOAD_FILE} && \
diff --git a/Dockerfile.builder b/Dockerfile.builder
index 40abb1e..cece255 100644
--- a/Dockerfile.builder
+++ b/Dockerfile.builder
@@ -1,11 +1,11 @@
 # golang parameters
-ARG GO_VERSION=1.25.4
+ARG GO_VERSION=1.25.6
 ARG OS_CODENAME=trixie
 ARG OSK_SDK=macos-13
 
 FROM ghcr.io/gythialy/osx-sdk:${OSK_SDK:-macos-13} AS osx-sdk
 
-FROM golang:${GO_VERSION:-1.25.4}-${OS_CODENAME:-trixie} AS base
+FROM golang:${GO_VERSION:-1.25.6}-${OS_CODENAME:-trixie} AS base
 
 # Re-declare ARG after FROM to make it available in this stage
 ARG OS_CODENAME=trixie