diff --git a/NEXT_CHANGELOG.md b/NEXT_CHANGELOG.md
index 0e4d6de08f4..af15c36a6a6 100644
--- a/NEXT_CHANGELOG.md
+++ b/NEXT_CHANGELOG.md
@@ -13,5 +13,6 @@
 ### Dependency updates
 
 * Bump `github.com/databricks/databricks-sdk-go` from v0.126.0 to v0.127.0 ([#4984](https://github.com/databricks/cli/pull/4984)).
+* Upgrade Go to 1.25.8 ([#5006](https://github.com/databricks/cli/pull/5006))
 
 ### API Changes
diff --git a/bundle/internal/tf/codegen/go.mod b/bundle/internal/tf/codegen/go.mod
index ddf74b42e35..fc62c856daf 100644
--- a/bundle/internal/tf/codegen/go.mod
+++ b/bundle/internal/tf/codegen/go.mod
@@ -2,7 +2,7 @@ module github.com/databricks/cli/bundle/internal/tf/codegen
 
 go 1.25.0
 
-toolchain go1.25.7
+toolchain go1.25.8
 
 require (
 	github.com/hashicorp/go-version v1.7.0
diff --git a/go.mod b/go.mod
index 5fa1dca1515..0d892e3d52d 100644
--- a/go.mod
+++ b/go.mod
@@ -2,7 +2,7 @@ module github.com/databricks/cli
 
 go 1.25.0
 
-toolchain go1.25.7
+toolchain go1.25.8
 
 require (
 	dario.cat/mergo v1.0.2 // BSD-3-Clause
diff --git a/tools/go.mod b/tools/go.mod
index a961b149968..1978d52b321 100644
--- a/tools/go.mod
+++ b/tools/go.mod
@@ -2,7 +2,7 @@ module github.com/databricks/cli/tools
 
 go 1.25.0
 
-toolchain go1.25.7
+toolchain go1.25.8
 
 require (
 	4d63.com/gocheckcompilerdirectives v1.3.0 // indirect