diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 5e6ad0413..477d42e59 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -44,7 +44,7 @@ jobs:
       - name: Generate migrations
         if: ${{ matrix.app == 'controlplane' }}
         env:
-          ATLAS_VERSION: v1.3.2
+          ATLAS_VERSION: v1.3.4
         run: |
           wget -q https://release.ariga.io/atlas/atlas-linux-amd64-$ATLAS_VERSION -O /tmp/atlas
           sudo install /tmp/atlas /usr/local/bin/atlas
diff --git a/CLAUDE.md b/CLAUDE.md
index ca0dade03..438ab6d05 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -139,7 +139,7 @@ make migration_lint         # Lint migration files
 
 ## Key Technologies
 
-- **Language**: Go 1.27.1
+- **Language**: Go 1.27.3
 - **API**: gRPC with HTTP/JSON gateway, Protocol Buffers with buf
 - **Database**: PostgreSQL with Ent ORM, Atlas for migrations
 - **Authentication**: OIDC, JWT tokens
diff --git a/app/artifact-cas/Dockerfile.goreleaser b/app/artifact-cas/Dockerfile.goreleaser
index 4a3414077..65655e438 100644
--- a/app/artifact-cas/Dockerfile.goreleaser
+++ b/app/artifact-cas/Dockerfile.goreleaser
@@ -1,4 +1,4 @@
-FROM golang:1.27.2@sha256:2d658507a011f1eadc0114d7a421b312b2e77d9042a24036a26e267cc9231677 AS builder
+FROM golang:1.27.3@sha256:957861185dbf29d93668ace41e011d091c6e779953d47f0316ef2cc58e28fe2b AS builder
 
 FROM scratch
 
diff --git a/app/cli/Dockerfile.goreleaser b/app/cli/Dockerfile.goreleaser
index 4199e3f31..61c4607bc 100644
--- a/app/cli/Dockerfile.goreleaser
+++ b/app/cli/Dockerfile.goreleaser
@@ -1,4 +1,4 @@
-FROM golang:1.27.2@sha256:2d658507a011f1eadc0114d7a421b312b2e77d9042a24036a26e267cc9231677 AS builder
+FROM golang:1.27.3@sha256:957861185dbf29d93668ace41e011d091c6e779953d47f0316ef2cc58e28fe2b AS builder
 RUN mkdir -p /.config/chainloop /rootfs/tmp && chmod 1777 /rootfs/tmp
 
 FROM scratch
diff --git a/app/controlplane/Dockerfile.goreleaser b/app/controlplane/Dockerfile.goreleaser
index ddc8cbae2..cce2ad173 100644
--- a/app/controlplane/Dockerfile.goreleaser
+++ b/app/controlplane/Dockerfile.goreleaser
@@ -1,4 +1,4 @@
-FROM golang:1.27.2@sha256:2d658507a011f1eadc0114d7a421b312b2e77d9042a24036a26e267cc9231677 AS builder
+FROM golang:1.27.3@sha256:957861185dbf29d93668ace41e011d091c6e779953d47f0316ef2cc58e28fe2b AS builder
 
 FROM scratch
 
diff --git a/app/controlplane/Dockerfile.migrations b/app/controlplane/Dockerfile.migrations
index e9d9e7bf4..fc48f7ff7 100644
--- a/app/controlplane/Dockerfile.migrations
+++ b/app/controlplane/Dockerfile.migrations
@@ -1,9 +1,9 @@
 # Container image built by go-releaser that's used to run migrations against the database during deployment
 # See https://atlasgo.io/guides/deploying/image
-# from: arigaio/atlas:1.3.2
-# docker run arigaio/atlas@sha256:1e4fe2e242281555f8fc41a95f09b94ccd47f85ee3a6bc1e808e1e48d27e4b39 version
-# atlas version v1.3.2
-FROM arigaio/atlas@sha256:1e4fe2e242281555f8fc41a95f09b94ccd47f85ee3a6bc1e808e1e48d27e4b39 as base
+# from: arigaio/atlas:1.3.4
+# docker run arigaio/atlas@sha256:3cd6883d5ec2703741f750fd5f9efed3a61f8e164b9dcea93ab7a7be429a1b5b version
+# atlas version v1.3.4
+FROM arigaio/atlas@sha256:3cd6883d5ec2703741f750fd5f9efed3a61f8e164b9dcea93ab7a7be429a1b5b as base
 
 FROM scratch
 # Update permissions to make it readable by the user
diff --git a/common.mk b/common.mk
index 5eaf8b95c..8dd2cf591 100644
--- a/common.mk
+++ b/common.mk
@@ -9,7 +9,7 @@ init: init-api-tools
 	# in the community version anymore https://github.com/ariga/atlas/issues/2388#issuecomment-1864287189
 	# install golangci-lint, keep in sync with .github/workflows/lint.yml
 	curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $$(go env GOPATH)/bin v2.14.0
-	curl -sSf https://atlasgo.sh | ATLAS_VERSION=v1.3.2 sh -s -- -y
+	curl -sSf https://atlasgo.sh | ATLAS_VERSION=v1.3.4 sh -s -- -y
 
 # initialize API tooling
 .PHONY: init-api-tools
diff --git a/go.mod b/go.mod
index d91a3f4f2..2df6be5df 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/chainloop-dev/chainloop
 
-go 1.27.2
+go 1.27.3
 
 require (
 	buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.12-20260825204119-511051f7f437.2