diff --git a/.github/setup_go_for_macos1013.sh b/.github/setup_go_for_macos1013.sh
index 9e501ca9..ddcb3ea0 100755
--- a/.github/setup_go_for_macos1013.sh
+++ b/.github/setup_go_for_macos1013.sh
@@ -2,7 +2,7 @@
 
 set -euo pipefail
 
-VERSION="1.25.10"
+VERSION="1.25.12"
 PATCH_COMMITS=(
   "afe69d3cec1c6dcf0f1797b20546795730850070"
   "1ed289b0cf87dc5aae9c6fe1aa5f200a83412938"
diff --git a/.github/setup_go_for_windows7.sh b/.github/setup_go_for_windows7.sh
index 01588bca..dfc2e0cb 100755
--- a/.github/setup_go_for_windows7.sh
+++ b/.github/setup_go_for_windows7.sh
@@ -2,14 +2,14 @@
 
 set -euo pipefail
 
-VERSION="1.25.10"
+VERSION="1.25.12"
 PATCH_COMMITS=(
-  "466f6c7a29bc098b0d4c987b803c779222894a11"
-  "1bdabae205052afe1dadb2ad6f1ba612cdbc532a"
-  "a90777dcf692dd2168577853ba743b4338721b06"
-  "f6bddda4e8ff58a957462a1a09562924d5f3d05c"
-  "bed309eff415bcb3c77dd4bc3277b682b89a388d"
-  "34b899c2fb39b092db4fa67c4417e41dc046be4b"
+  "da4094da73b3b419e3f347594d805e2831f65667"
+  "824aa60e77f06dbae86c20a164c78df722eb7047"
+  "a3b6ba31c8cc67b6d899b978bba7b53e95afc46b"
+  "edfa8de63435a409a59f60731b66ab5940d6d3a4"
+  "284f9b24d6284984966a8431e30fdc2583938f96"
+  "9864798dee8dd47b55d1d5100d2f1b909a2a6e6c"
 )
 CURL_ARGS=(
   -fL
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 81c57086..bf7e5c89 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -47,7 +47,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v5
         with:
-          go-version: ~1.25.10
+          go-version: 1.25.12
       - name: Check input version
         if: github.event_name == 'workflow_dispatch'
         run: |-
@@ -124,7 +124,7 @@ jobs:
         if: ${{ ! matrix.legacy_win7 }}
         uses: actions/setup-go@v5
         with:
-          go-version: ~1.25.10
+          go-version: 1.25.12
       - name: Cache Go for Windows 7
         if: matrix.legacy_win7
         id: cache-go-for-windows7
@@ -132,7 +132,7 @@ jobs:
         with:
           path: |
             ~/go/go_win7
-          key: go_win7_1258
+          key: go_win7_12512
       - name: Setup Go for Windows 7
         if: matrix.legacy_win7 && steps.cache-go-for-windows7.outputs.cache-hit != 'true'
         env:
@@ -649,7 +649,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v5
         with:
-          go-version: ~1.25.10
+          go-version: 1.25.12
       - name: Setup Android NDK
         id: setup-ndk
         uses: nttld/setup-ndk@v1
@@ -743,7 +743,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v5
         with:
-          go-version: ~1.25.10
+          go-version: 1.25.12
       - name: Setup Android NDK
         id: setup-ndk
         uses: nttld/setup-ndk@v1
@@ -842,7 +842,7 @@ jobs:
         if: matrix.if
         uses: actions/setup-go@v5
         with:
-          go-version: ~1.25.10
+          go-version: 1.25.12
       - name: Set tag
         if: matrix.if
         run: |-
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 0ef3fe96..518af08d 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -55,7 +55,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v5
         with:
-          go-version: ~1.25.10
+          go-version: 1.25.12
       - name: Clone cronet-go
         if: matrix.naive
         run: |
diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml
index 6153c3be..39af010a 100644
--- a/.github/workflows/linux.yml
+++ b/.github/workflows/linux.yml
@@ -29,7 +29,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v5
         with:
-          go-version: ~1.25.10
+          go-version: 1.25.12
       - name: Check input version
         if: github.event_name == 'workflow_dispatch'
         run: |-
@@ -72,7 +72,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v5
         with:
-          go-version: ~1.25.10
+          go-version: 1.25.12
       - name: Clone cronet-go
         if: matrix.naive
         run: |