diff --git a/.github/workflows/benchmark.yaml b/.github/workflows/benchmark.yaml
index e0d0b5ea..2a9cfb3b 100644
--- a/.github/workflows/benchmark.yaml
+++ b/.github/workflows/benchmark.yaml
@@ -18,6 +18,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       # Run benchmark with `go test -bench` and stores the output to a file
       - name: Run benchmark
diff --git a/.github/workflows/branch-cov.yaml b/.github/workflows/branch-cov.yaml
index b442ed6e..d07781ce 100644
--- a/.github/workflows/branch-cov.yaml
+++ b/.github/workflows/branch-cov.yaml
@@ -18,6 +18,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - name: Install dependencies
         run: |
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 5a772b56..da7d2587 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -30,6 +30,7 @@ jobs:
         uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - name: Cache go dependencies
         id: cache-go-dependencies
diff --git a/.github/workflows/cloc.yaml b/.github/workflows/cloc.yaml
index 2550c7cc..05cfd314 100644
--- a/.github/workflows/cloc.yaml
+++ b/.github/workflows/cloc.yaml
@@ -21,6 +21,7 @@ jobs:
         uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - name: Check out source code
         uses: actions/checkout@v6
diff --git a/.github/workflows/cluster.yaml b/.github/workflows/cluster.yaml
index 73f8f151..39f9cf5c 100644
--- a/.github/workflows/cluster.yaml
+++ b/.github/workflows/cluster.yaml
@@ -20,6 +20,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - name: Install dependencies
         run: |
@@ -275,6 +276,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - name: Install dependencies
         run: |
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index e26f4aea..ecf557b1 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -50,6 +50,7 @@ jobs:
       uses: actions/setup-go@v6
       with:
         cache: false
+        check-latest: true
         go-version: 1.25.x
 
     # Initializes the CodeQL tools for scanning.
diff --git a/.github/workflows/compare-binary-size.yaml b/.github/workflows/compare-binary-size.yaml
index 68424329..2c8fe18b 100644
--- a/.github/workflows/compare-binary-size.yaml
+++ b/.github/workflows/compare-binary-size.yaml
@@ -14,6 +14,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - name: Checkout zot (main branch)
         run: |
diff --git a/.github/workflows/ecosystem-tools.yaml b/.github/workflows/ecosystem-tools.yaml
index 617a888e..64a046cc 100644
--- a/.github/workflows/ecosystem-tools.yaml
+++ b/.github/workflows/ecosystem-tools.yaml
@@ -20,6 +20,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - name: Install dependencies
         run: |
diff --git a/.github/workflows/gc-stress-test.yaml b/.github/workflows/gc-stress-test.yaml
index 0423f7b0..504419e1 100644
--- a/.github/workflows/gc-stress-test.yaml
+++ b/.github/workflows/gc-stress-test.yaml
@@ -20,6 +20,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
 
       - name: Run zb
@@ -59,6 +60,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
 
       - name: Run zb
@@ -98,6 +100,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - uses: ./.github/actions/setup-localstack
       - name: Setup minio service
@@ -182,6 +185,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - uses: ./.github/actions/setup-localstack
       - name: Setup minio service
diff --git a/.github/workflows/golangci-lint.yaml b/.github/workflows/golangci-lint.yaml
index 29bc111a..55d56322 100644
--- a/.github/workflows/golangci-lint.yaml
+++ b/.github/workflows/golangci-lint.yaml
@@ -18,6 +18,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - uses: actions/checkout@v6
       - name: Run linter with GH action
diff --git a/.github/workflows/gqlgen.yaml b/.github/workflows/gqlgen.yaml
index ff2b6582..4b697cee 100644
--- a/.github/workflows/gqlgen.yaml
+++ b/.github/workflows/gqlgen.yaml
@@ -25,6 +25,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - name: Install dependencies
         run: |
diff --git a/.github/workflows/license.yaml b/.github/workflows/license.yaml
index 4e787ca9..0a625bd7 100644
--- a/.github/workflows/license.yaml
+++ b/.github/workflows/license.yaml
@@ -22,6 +22,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - name: Install go-licenses
         run: go install github.com/google/go-licenses@latest
diff --git a/.github/workflows/nightly.yaml b/.github/workflows/nightly.yaml
index 9384015b..d6f8230a 100644
--- a/.github/workflows/nightly.yaml
+++ b/.github/workflows/nightly.yaml
@@ -21,6 +21,7 @@ jobs:
       - uses: actions/checkout@v6
       - uses: actions/setup-go@v6
         with:
+          check-latest: true
           go-version: 1.25.x
       - name: Install dependencies
         run: |
@@ -72,6 +73,7 @@ jobs:
         uses: actions/checkout@v6
       - uses: actions/setup-go@v6
         with:
+          check-latest: true
           go-version: 1.25.x
       - name: Install dependencies
         run: |
@@ -90,6 +92,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - uses: ./.github/actions/setup-localstack
 
@@ -127,6 +130,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - uses: ./.github/actions/setup-localstack
 
@@ -175,6 +179,7 @@ jobs:
       - uses: actions/checkout@v6
       - uses: actions/setup-go@v6
         with:
+          check-latest: true
           go-version: 1.25.x
       - name: Install dependencies
         run: |
@@ -209,6 +214,7 @@ jobs:
       - uses: actions/checkout@v6
       - uses: actions/setup-go@v6
         with:
+          check-latest: true
           go-version: 1.25.x
       - name: Install dependencies
         run: |
@@ -235,6 +241,7 @@ jobs:
       - uses: actions/checkout@v6
       - uses: actions/setup-go@v6
         with:
+          check-latest: true
           go-version: 1.25.x
       - name: Install crane
         run: |
@@ -251,6 +258,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - name: Install dependencies
         run: |
@@ -337,6 +345,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - name: Install dependencies
         run: |
diff --git a/.github/workflows/oci-conformance-action.yaml b/.github/workflows/oci-conformance-action.yaml
index a249b707..e17e6a6a 100644
--- a/.github/workflows/oci-conformance-action.yaml
+++ b/.github/workflows/oci-conformance-action.yaml
@@ -24,6 +24,7 @@ jobs:
       uses: actions/setup-go@v6
       with:
         cache: false
+        check-latest: true
         go-version: 1.25.x
     - name: Checkout this PR
       uses: actions/checkout@v6
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 098ac573..b5fcda14 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -21,6 +21,7 @@ jobs:
         uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - name: Cache go dependencies
         id: cache-go-dependencies
@@ -60,6 +61,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - name: Cache go dependencies
         id: cache-go-dependencies
@@ -99,6 +101,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - name: Cache go dependencies
         id: cache-go-dependencies
@@ -129,6 +132,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - name: Cache go dependencies
         id: cache-go-dependencies
@@ -161,6 +165,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - name: download all workflow coverage files
         uses: actions/download-artifact@v7
diff --git a/.github/workflows/tls.yaml b/.github/workflows/tls.yaml
index 4323ed3e..ae0cf2b0 100644
--- a/.github/workflows/tls.yaml
+++ b/.github/workflows/tls.yaml
@@ -26,6 +26,7 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - name: Install dependencies
         run: |
diff --git a/.github/workflows/verify-config.yaml b/.github/workflows/verify-config.yaml
index b0adabf6..8b3005df 100644
--- a/.github/workflows/verify-config.yaml
+++ b/.github/workflows/verify-config.yaml
@@ -24,6 +24,7 @@ jobs:
         uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - name: Cache go dependencies
         id: cache-go-dependencies
diff --git a/.github/workflows/web-scan.yaml b/.github/workflows/web-scan.yaml
index 85b7c73a..9584a5d8 100644
--- a/.github/workflows/web-scan.yaml
+++ b/.github/workflows/web-scan.yaml
@@ -25,6 +25,7 @@ jobs:
         uses: actions/setup-go@v6
         with:
           cache: false
+          check-latest: true
           go-version: 1.25.x
       - name: Checkout
         uses: actions/checkout@v6
diff --git a/go.mod b/go.mod
index c5bfdc89..2d0c0001 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module zotregistry.dev/zot/v2
 
-go 1.25.6
+go 1.25.7
 
 require (
 	github.com/99designs/gqlgen v0.17.86