diff --git a/scripts/ci/buildenv-versions.env b/scripts/ci/buildenv-versions.env
index 7fc3231..016521f 100644
--- a/scripts/ci/buildenv-versions.env
+++ b/scripts/ci/buildenv-versions.env
@@ -16,7 +16,7 @@ GO_VERSION="1.26.5"
 GO_SRC_URL="https://go.dev/dl/go${GO_VERSION}.linux-amd64.tar.gz"
 # Checksum as published by go.dev itself (`curl -s https://go.dev/dl/?mode=json`)
 # — must be re-derived from the same source whenever GO_VERSION changes.
-GO_SRC_SHA256="88c162b204e6eefcc32499453b492e80209f4a4c78c33092636901c540fb0d05"
+GO_SRC_SHA256="5c2c3b16caefa1d968a94c1daca04a7ca301a496d9b086e17ad77bb81393f053"
 
 # Rust toolchain (builds netavark, aardvark-dns) — installed via rustup
 # rather than a pinned tarball, since rustup itself provides reproducible,