From 518fb44a9289ba5a3aeb2b5e84e4cb39be2883ea Mon Sep 17 00:00:00 2001
From: "Michael B. Gale" <mbg@github.com>
Date: Tue, 10 Feb 2026 10:01:38 +0000
Subject: [PATCH] Go: Bump toolchain to `1.25.7`

---
 MODULE.bazel               | 4 ++--
 go/actions/test/action.yml | 2 +-
 go/extractor/go.mod        | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/MODULE.bazel b/MODULE.bazel
index b24546d4a3c1..4d1ba916ec11 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -254,11 +254,11 @@ use_repo(
 )
 
 go_sdk = use_extension("@rules_go//go:extensions.bzl", "go_sdk")
-go_sdk.download(version = "1.25.0")
+go_sdk.download(version = "1.25.7")
 
 go_deps = use_extension("@gazelle//:extensions.bzl", "go_deps")
 go_deps.from_file(go_mod = "//go/extractor:go.mod")
-use_repo(go_deps, "org_golang_x_mod", "org_golang_x_tools")
+use_repo(go_deps, "com_github_stretchr_testify", "org_golang_x_mod", "org_golang_x_tools")
 
 ripunzip_archive = use_repo_rule("//misc/ripunzip:ripunzip.bzl", "ripunzip_archive")
 
diff --git a/go/actions/test/action.yml b/go/actions/test/action.yml
index d64142115f01..bc9535cda108 100644
--- a/go/actions/test/action.yml
+++ b/go/actions/test/action.yml
@@ -4,7 +4,7 @@ inputs:
   go-test-version:
     description: Which Go version to use for running the tests
     required: false
-    default: "~1.25.0"
+    default: "~1.25.7"
   run-code-checks:
     description: Whether to run formatting, code and qhelp generation checks
     required: false
diff --git a/go/extractor/go.mod b/go/extractor/go.mod
index a94af1a7e9ba..49636d046a62 100644
--- a/go/extractor/go.mod
+++ b/go/extractor/go.mod
@@ -2,7 +2,7 @@ module github.com/github/codeql-go/extractor
 
 go 1.25
 
-toolchain go1.25.0
+toolchain go1.25.7
 
 // when updating this, run
 //    bazel run @rules_go//go -- mod tidy