diff --git a/dockerfiles/cd/builders/ng-monitoring/Dockerfile b/dockerfiles/cd/builders/ng-monitoring/Dockerfile
index 93ddddff..031e1031 100644
--- a/dockerfiles/cd/builders/ng-monitoring/Dockerfile
+++ b/dockerfiles/cd/builders/ng-monitoring/Dockerfile
@@ -20,7 +20,7 @@ RUN --mount=type=cache,target=/var/cache/dnf \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.8
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/ng-monitoring/centos7/Dockerfile b/dockerfiles/cd/builders/ng-monitoring/centos7/Dockerfile
index 9b60c008..69d0edfa 100644
--- a/dockerfiles/cd/builders/ng-monitoring/centos7/Dockerfile
+++ b/dockerfiles/cd/builders/ng-monitoring/centos7/Dockerfile
@@ -25,7 +25,7 @@ RUN --mount=type=cache,target=/var/cache/yum \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.8
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/ng-monitoring/skaffold.centos7.non-root.yaml b/dockerfiles/cd/builders/ng-monitoring/skaffold.centos7.non-root.yaml
index fe1dd073..7a47b4bc 100644
--- a/dockerfiles/cd/builders/ng-monitoring/skaffold.centos7.non-root.yaml
+++ b/dockerfiles/cd/builders/ng-monitoring/skaffold.centos7.non-root.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/ng-monitoring/skaffold.centos7.yaml b/dockerfiles/cd/builders/ng-monitoring/skaffold.centos7.yaml
index c2274f78..e571eb2e 100644
--- a/dockerfiles/cd/builders/ng-monitoring/skaffold.centos7.yaml
+++ b/dockerfiles/cd/builders/ng-monitoring/skaffold.centos7.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/ng-monitoring/skaffold.non-root.yaml b/dockerfiles/cd/builders/ng-monitoring/skaffold.non-root.yaml
index eaeddae3..97f810e1 100644
--- a/dockerfiles/cd/builders/ng-monitoring/skaffold.non-root.yaml
+++ b/dockerfiles/cd/builders/ng-monitoring/skaffold.non-root.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/ng-monitoring/skaffold.yaml b/dockerfiles/cd/builders/ng-monitoring/skaffold.yaml
index cd1460f5..76daf35b 100644
--- a/dockerfiles/cd/builders/ng-monitoring/skaffold.yaml
+++ b/dockerfiles/cd/builders/ng-monitoring/skaffold.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/pd/skaffold.centos7.non-root.yaml b/dockerfiles/cd/builders/pd/skaffold.centos7.non-root.yaml
index 89563bb2..95b1acbf 100644
--- a/dockerfiles/cd/builders/pd/skaffold.centos7.non-root.yaml
+++ b/dockerfiles/cd/builders/pd/skaffold.centos7.non-root.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/pd/skaffold.centos7.yaml b/dockerfiles/cd/builders/pd/skaffold.centos7.yaml
index 109960b6..523c5e12 100644
--- a/dockerfiles/cd/builders/pd/skaffold.centos7.yaml
+++ b/dockerfiles/cd/builders/pd/skaffold.centos7.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/pd/skaffold.non-root.yaml b/dockerfiles/cd/builders/pd/skaffold.non-root.yaml
index 56e108f1..6588aab6 100644
--- a/dockerfiles/cd/builders/pd/skaffold.non-root.yaml
+++ b/dockerfiles/cd/builders/pd/skaffold.non-root.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/pd/skaffold.yaml b/dockerfiles/cd/builders/pd/skaffold.yaml
index 9a47daae..b03cd0cb 100644
--- a/dockerfiles/cd/builders/pd/skaffold.yaml
+++ b/dockerfiles/cd/builders/pd/skaffold.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tem/Dockerfile b/dockerfiles/cd/builders/tem/Dockerfile
index 8e7f717a..2625c926 100644
--- a/dockerfiles/cd/builders/tem/Dockerfile
+++ b/dockerfiles/cd/builders/tem/Dockerfile
@@ -36,7 +36,7 @@ ENV PATH=/usr/local/bin/buf/bin/:$PATH
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.8
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/tem/skaffold.non-root.yaml b/dockerfiles/cd/builders/tem/skaffold.non-root.yaml
index f66fd002..b9f883c0 100644
--- a/dockerfiles/cd/builders/tem/skaffold.non-root.yaml
+++ b/dockerfiles/cd/builders/tem/skaffold.non-root.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tem/skaffold.yaml b/dockerfiles/cd/builders/tem/skaffold.yaml
index 5246186c..e8bb0e00 100644
--- a/dockerfiles/cd/builders/tem/skaffold.yaml
+++ b/dockerfiles/cd/builders/tem/skaffold.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/ticdc/Dockerfile b/dockerfiles/cd/builders/ticdc/Dockerfile
index 25a238b8..894258c8 100644
--- a/dockerfiles/cd/builders/ticdc/Dockerfile
+++ b/dockerfiles/cd/builders/ticdc/Dockerfile
@@ -19,7 +19,7 @@ RUN --mount=type=cache,target=/var/cache/dnf \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.8
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/ticdc/centos7/Dockerfile b/dockerfiles/cd/builders/ticdc/centos7/Dockerfile
index 0604f741..aed15190 100644
--- a/dockerfiles/cd/builders/ticdc/centos7/Dockerfile
+++ b/dockerfiles/cd/builders/ticdc/centos7/Dockerfile
@@ -27,7 +27,7 @@ RUN --mount=type=cache,target=/var/cache/yum \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.8
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/ticdc/skaffold.centos7.non-root.yaml b/dockerfiles/cd/builders/ticdc/skaffold.centos7.non-root.yaml
index f9ecd46b..9cd66b82 100644
--- a/dockerfiles/cd/builders/ticdc/skaffold.centos7.non-root.yaml
+++ b/dockerfiles/cd/builders/ticdc/skaffold.centos7.non-root.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/ticdc/skaffold.centos7.yaml b/dockerfiles/cd/builders/ticdc/skaffold.centos7.yaml
index bd1468a5..f88be6bb 100644
--- a/dockerfiles/cd/builders/ticdc/skaffold.centos7.yaml
+++ b/dockerfiles/cd/builders/ticdc/skaffold.centos7.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/ticdc/skaffold.non-root.yaml b/dockerfiles/cd/builders/ticdc/skaffold.non-root.yaml
index 8cbaa360..4503fcb6 100644
--- a/dockerfiles/cd/builders/ticdc/skaffold.non-root.yaml
+++ b/dockerfiles/cd/builders/ticdc/skaffold.non-root.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/ticdc/skaffold.yaml b/dockerfiles/cd/builders/ticdc/skaffold.yaml
index 2c342e80..598df33f 100644
--- a/dockerfiles/cd/builders/ticdc/skaffold.yaml
+++ b/dockerfiles/cd/builders/ticdc/skaffold.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidb-dashboard/Dockerfile b/dockerfiles/cd/builders/tidb-dashboard/Dockerfile
index 2c8b68eb..885b1a45 100644
--- a/dockerfiles/cd/builders/tidb-dashboard/Dockerfile
+++ b/dockerfiles/cd/builders/tidb-dashboard/Dockerfile
@@ -20,7 +20,7 @@ RUN --mount=type=cache,target=/var/cache/dnf \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.8
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/tidb-dashboard/centos7/Dockerfile b/dockerfiles/cd/builders/tidb-dashboard/centos7/Dockerfile
index 24c705f3..825e8ee3 100644
--- a/dockerfiles/cd/builders/tidb-dashboard/centos7/Dockerfile
+++ b/dockerfiles/cd/builders/tidb-dashboard/centos7/Dockerfile
@@ -23,7 +23,7 @@ RUN --mount=type=cache,target=/var/cache/yum \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.8
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/tidb-dashboard/skaffold.centos7.non-root.yaml b/dockerfiles/cd/builders/tidb-dashboard/skaffold.centos7.non-root.yaml
index 23c0c267..a0c6ab9a 100644
--- a/dockerfiles/cd/builders/tidb-dashboard/skaffold.centos7.non-root.yaml
+++ b/dockerfiles/cd/builders/tidb-dashboard/skaffold.centos7.non-root.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidb-dashboard/skaffold.centos7.yaml b/dockerfiles/cd/builders/tidb-dashboard/skaffold.centos7.yaml
index 6225db02..e95ad0f2 100644
--- a/dockerfiles/cd/builders/tidb-dashboard/skaffold.centos7.yaml
+++ b/dockerfiles/cd/builders/tidb-dashboard/skaffold.centos7.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidb-dashboard/skaffold.non-root.yaml b/dockerfiles/cd/builders/tidb-dashboard/skaffold.non-root.yaml
index a5f97bd3..036fcc00 100644
--- a/dockerfiles/cd/builders/tidb-dashboard/skaffold.non-root.yaml
+++ b/dockerfiles/cd/builders/tidb-dashboard/skaffold.non-root.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidb-dashboard/skaffold.yaml b/dockerfiles/cd/builders/tidb-dashboard/skaffold.yaml
index 4e1c0b3c..44acb587 100644
--- a/dockerfiles/cd/builders/tidb-dashboard/skaffold.yaml
+++ b/dockerfiles/cd/builders/tidb-dashboard/skaffold.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidb-operator/Dockerfile b/dockerfiles/cd/builders/tidb-operator/Dockerfile
index b0d81d38..bebedcf0 100644
--- a/dockerfiles/cd/builders/tidb-operator/Dockerfile
+++ b/dockerfiles/cd/builders/tidb-operator/Dockerfile
@@ -8,7 +8,7 @@
 #   - docker build -t tidb-operator -f Dockerfile ./tidb-operator
 
 ########### stage: builder
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.8
 FROM golang:${GOLANG_VERSION} AS builder
 LABEL org.opencontainers.image.authors="wuhui.zuo@pingcap.com"
 LABEL org.opencontainers.image.description="binary builder for TiDB Operator"
diff --git a/dockerfiles/cd/builders/tidb-operator/skaffold.non-root.yaml b/dockerfiles/cd/builders/tidb-operator/skaffold.non-root.yaml
index 50dc9caf..e2f872ad 100644
--- a/dockerfiles/cd/builders/tidb-operator/skaffold.non-root.yaml
+++ b/dockerfiles/cd/builders/tidb-operator/skaffold.non-root.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidb-operator/skaffold.yaml b/dockerfiles/cd/builders/tidb-operator/skaffold.yaml
index e97b77a2..f3bbed6a 100644
--- a/dockerfiles/cd/builders/tidb-operator/skaffold.yaml
+++ b/dockerfiles/cd/builders/tidb-operator/skaffold.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidb/Dockerfile b/dockerfiles/cd/builders/tidb/Dockerfile
index 6e8da45b..2ddb6337 100644
--- a/dockerfiles/cd/builders/tidb/Dockerfile
+++ b/dockerfiles/cd/builders/tidb/Dockerfile
@@ -20,7 +20,7 @@ RUN --mount=type=cache,target=/var/cache/dnf \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.8
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/tidb/centos7/Dockerfile b/dockerfiles/cd/builders/tidb/centos7/Dockerfile
index bbc6fd8d..7bbcf944 100644
--- a/dockerfiles/cd/builders/tidb/centos7/Dockerfile
+++ b/dockerfiles/cd/builders/tidb/centos7/Dockerfile
@@ -43,7 +43,7 @@ RUN --mount=type=cache,target=/var/cache/yum \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.8
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/tidb/skaffold.centos7.non-root.yaml b/dockerfiles/cd/builders/tidb/skaffold.centos7.non-root.yaml
index d182b421..354b7d10 100644
--- a/dockerfiles/cd/builders/tidb/skaffold.centos7.non-root.yaml
+++ b/dockerfiles/cd/builders/tidb/skaffold.centos7.non-root.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidb/skaffold.centos7.yaml b/dockerfiles/cd/builders/tidb/skaffold.centos7.yaml
index 33103493..dd79f7bd 100644
--- a/dockerfiles/cd/builders/tidb/skaffold.centos7.yaml
+++ b/dockerfiles/cd/builders/tidb/skaffold.centos7.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidb/skaffold.non-root.yaml b/dockerfiles/cd/builders/tidb/skaffold.non-root.yaml
index 76782f12..7d25905e 100644
--- a/dockerfiles/cd/builders/tidb/skaffold.non-root.yaml
+++ b/dockerfiles/cd/builders/tidb/skaffold.non-root.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidb/skaffold.yaml b/dockerfiles/cd/builders/tidb/skaffold.yaml
index be9fabd4..a5fe2e36 100644
--- a/dockerfiles/cd/builders/tidb/skaffold.yaml
+++ b/dockerfiles/cd/builders/tidb/skaffold.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidbx/centos7/Dockerfile b/dockerfiles/cd/builders/tidbx/centos7/Dockerfile
index 8e76df93..ee524514 100644
--- a/dockerfiles/cd/builders/tidbx/centos7/Dockerfile
+++ b/dockerfiles/cd/builders/tidbx/centos7/Dockerfile
@@ -18,7 +18,7 @@ RUN --mount=type=cache,target=/var/cache/yum \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.8
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/tidbx/skaffold.centos7.non-root.yaml b/dockerfiles/cd/builders/tidbx/skaffold.centos7.non-root.yaml
index 37872adc..88a2d9fd 100644
--- a/dockerfiles/cd/builders/tidbx/skaffold.centos7.non-root.yaml
+++ b/dockerfiles/cd/builders/tidbx/skaffold.centos7.non-root.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tidbx/skaffold.centos7.yaml b/dockerfiles/cd/builders/tidbx/skaffold.centos7.yaml
index 7326a076..6ddebd0d 100644
--- a/dockerfiles/cd/builders/tidbx/skaffold.centos7.yaml
+++ b/dockerfiles/cd/builders/tidbx/skaffold.centos7.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tiflow/Dockerfile b/dockerfiles/cd/builders/tiflow/Dockerfile
index 8bf7fb03..82e7e295 100644
--- a/dockerfiles/cd/builders/tiflow/Dockerfile
+++ b/dockerfiles/cd/builders/tiflow/Dockerfile
@@ -15,7 +15,7 @@ RUN --mount=type=cache,target=/var/cache/dnf \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.8
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/tiflow/centos7/Dockerfile b/dockerfiles/cd/builders/tiflow/centos7/Dockerfile
index 2e0d0d96..dc273d6f 100644
--- a/dockerfiles/cd/builders/tiflow/centos7/Dockerfile
+++ b/dockerfiles/cd/builders/tiflow/centos7/Dockerfile
@@ -24,7 +24,7 @@ RUN --mount=type=cache,target=/var/cache/yum \
 
 # install golang toolchain
 # renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.26.6
+ARG GOLANG_VERSION=1.26.8
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH=/usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/builders/tiflow/skaffold.centos7.non-root.yaml b/dockerfiles/cd/builders/tiflow/skaffold.centos7.non-root.yaml
index 61be8b24..f4eb0291 100644
--- a/dockerfiles/cd/builders/tiflow/skaffold.centos7.non-root.yaml
+++ b/dockerfiles/cd/builders/tiflow/skaffold.centos7.non-root.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tiflow/skaffold.centos7.yaml b/dockerfiles/cd/builders/tiflow/skaffold.centos7.yaml
index 34009931..8b7f1e01 100644
--- a/dockerfiles/cd/builders/tiflow/skaffold.centos7.yaml
+++ b/dockerfiles/cd/builders/tiflow/skaffold.centos7.yaml
@@ -28,7 +28,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tiflow/skaffold.non-root.yaml b/dockerfiles/cd/builders/tiflow/skaffold.non-root.yaml
index d78fdc2f..715d8f0e 100644
--- a/dockerfiles/cd/builders/tiflow/skaffold.non-root.yaml
+++ b/dockerfiles/cd/builders/tiflow/skaffold.non-root.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace
diff --git a/dockerfiles/cd/builders/tiflow/skaffold.yaml b/dockerfiles/cd/builders/tiflow/skaffold.yaml
index a01f4f20..1cb836f3 100644
--- a/dockerfiles/cd/builders/tiflow/skaffold.yaml
+++ b/dockerfiles/cd/builders/tiflow/skaffold.yaml
@@ -29,7 +29,7 @@ profiles:
         path: /build/artifacts/0/docker/buildArgs
         value:
           # renovate: datasource=docker depName=golang
-          GOLANG_VERSION: 1.26.6
+          GOLANG_VERSION: 1.26.8
   - name: go-1.25
     patches:
       - op: replace