diff --git a/Dockerfile.derper b/Dockerfile.derper
index 04a07af6..dc2d59c1 100644
--- a/Dockerfile.derper
+++ b/Dockerfile.derper
@@ -1,6 +1,6 @@
 # For testing purposes only
 
-FROM golang:1.27.1-alpine AS build-env
+FROM golang:1.27.2-alpine AS build-env
 
 # The builder pin is a floor, not a ceiling: this stage compiles a tailscale
 # tree cloned from an unpinned branch, which can raise its go directive at any
diff --git a/Dockerfile.tailscale-HEAD b/Dockerfile.tailscale-HEAD
index 4a91acf1..f862c0bc 100644
--- a/Dockerfile.tailscale-HEAD
+++ b/Dockerfile.tailscale-HEAD
@@ -4,7 +4,7 @@
 # This Dockerfile is more or less lifted from tailscale/tailscale
 # to ensure a similar build process when testing the HEAD of tailscale.
 
-FROM golang:1.27.1-alpine AS build-env
+FROM golang:1.27.2-alpine AS build-env
 
 # The builder pin is a floor, not a ceiling: this stage compiles a tailscale
 # tree cloned from an unpinned branch, which can raise its go directive at any