diff --git a/.github/actions/pwru-test/action.yaml b/.github/actions/pwru-test/action.yaml
index 710e0116..3b97f56f 100644
--- a/.github/actions/pwru-test/action.yaml
+++ b/.github/actions/pwru-test/action.yaml
@@ -24,7 +24,7 @@ runs:
   using: composite
   steps:
     - name: PWRU test
-      uses: cilium/little-vm-helper@01debd6cb7e5514cfdb4a33e776bdc647bc5306e # v0.0.27
+      uses: cilium/little-vm-helper@ad43ff511dd5365a0011ae9f864ec959c36daebf # v0.0.28
       with:
         provision: 'false'
         cmd: |
@@ -52,7 +52,7 @@ runs:
 
     - name: Fetch artifacts from LVH VM
       if: ${{ !success() }}
-      uses: cilium/little-vm-helper@01debd6cb7e5514cfdb4a33e776bdc647bc5306e # v0.0.27
+      uses: cilium/little-vm-helper@ad43ff511dd5365a0011ae9f864ec959c36daebf # v0.0.28
       with:
         provision: 'false'
         cmd: |
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index a43b45ad..a53c88db 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -17,7 +17,7 @@ jobs:
         uses: actions/checkout@71cf2267d89c5cb81562390fa70a37fa40b1305e
 
       - name: Set up Go
-        uses: actions/setup-go@faf52423ec0d44c58f68e83b614bfcd99dded66f
+        uses: actions/setup-go@3a0c2c82458cbb45a3cbfeeb2b91ce8f85420560
         with:
           go-version: 1.25.4
 
@@ -26,7 +26,7 @@ jobs:
 
       - name: Create Release
         if: github.event_name == 'push'
-        uses: softprops/action-gh-release@6da8fa9354ddfdc4aeace5fc48d7f679b5214090 # v2.4.1
+        uses: softprops/action-gh-release@5be0e66d93ac7ed76da52eca8bb058f665c3a5fe # v2.4.2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 71debcea..8aee3364 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -14,7 +14,7 @@ jobs:
     - uses: actions/checkout@71cf2267d89c5cb81562390fa70a37fa40b1305e
 
     - name: Set up Go
-      uses: actions/setup-go@faf52423ec0d44c58f68e83b614bfcd99dded66f
+      uses: actions/setup-go@3a0c2c82458cbb45a3cbfeeb2b91ce8f85420560
       with:
         go-version: 1.25.4
 
@@ -120,7 +120,7 @@ jobs:
           tar xfv pwru-linux-${{ matrix.arch }}.tar.gz
 
       - name: Provision LVH VMs
-        uses: cilium/little-vm-helper@01debd6cb7e5514cfdb4a33e776bdc647bc5306e # v0.0.27
+        uses: cilium/little-vm-helper@ad43ff511dd5365a0011ae9f864ec959c36daebf # v0.0.28
         with:
           # renovate: datasource=github-tags depName=cilium/little-vm-helper
           lvh-version: 'v0.0.27'
@@ -226,7 +226,7 @@ jobs:
           expected-output-pattern: 'arp_rcv'
 
       - name: Derive ifindex for next test [1/2]
-        uses: cilium/little-vm-helper@01debd6cb7e5514cfdb4a33e776bdc647bc5306e # v0.0.27
+        uses: cilium/little-vm-helper@ad43ff511dd5365a0011ae9f864ec959c36daebf # v0.0.28
         with:
           provision: 'false'
           cmd: cat /sys/class/net/lo/ifindex >> /host/ifindex
@@ -289,7 +289,7 @@ jobs:
 
       - name: Fetch artifacts
         if: ${{ !success() }}
-        uses: cilium/little-vm-helper@01debd6cb7e5514cfdb4a33e776bdc647bc5306e # v0.0.27
+        uses: cilium/little-vm-helper@ad43ff511dd5365a0011ae9f864ec959c36daebf # v0.0.28
         with:
           provision: 'false'
           cmd: |
diff --git a/Makefile b/Makefile
index 4230d58f..1e3ea1c4 100644
--- a/Makefile
+++ b/Makefile
@@ -18,7 +18,7 @@ TEST_TIMEOUT ?= 5s
 
 # renovate: datasource=docker depName=golang
 GO_IMAGE_VERSION = 1.25.4
-GO_IMAGE_SHA = sha256:5d73b7b83dd6e0258ff62832c93b6ea208fbb7727985d265fb49f75f81fc3d1f
+GO_IMAGE_SHA = sha256:e68f6a00e88586577fafa4d9cefad1349c2be70d21244321321c407474ff9bf2
 
 ## Build the GO binary
 pwru: libpcap/libpcap.a