diff --git a/.github/workflows/deps.yml b/.github/workflows/deps.yml
index 299e60dd..7ec593c5 100644
--- a/.github/workflows/deps.yml
+++ b/.github/workflows/deps.yml
@@ -26,3 +26,5 @@ jobs:
 
       - id: govulncheck
         uses: golang/govulncheck-action@v1
+        with:
+          go-version-file: go.mod
diff --git a/Dockerfile b/Dockerfile
index 0173bd76..40f30dc5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.21.1-alpine
+FROM golang:1.21.2-alpine
 COPY . /src
 WORKDIR /src
 RUN apk add make git
diff --git a/go.mod b/go.mod
index bf4dde0b..546708b5 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/cloudflare/pint
 
-go 1.21.1
+go 1.21.2
 
 require (
 	github.com/cespare/xxhash/v2 v2.2.0
diff --git a/tools/gofumpt/go.mod b/tools/gofumpt/go.mod
index 84b18a9e..32ef02c3 100644
--- a/tools/gofumpt/go.mod
+++ b/tools/gofumpt/go.mod
@@ -1,6 +1,6 @@
 module _
 
-go 1.21.1
+go 1.21.2
 
 require mvdan.cc/gofumpt v0.5.0
 
diff --git a/tools/goimports/go.mod b/tools/goimports/go.mod
index a37cc8b9..8dafca1c 100644
--- a/tools/goimports/go.mod
+++ b/tools/goimports/go.mod
@@ -1,6 +1,6 @@
 module _
 
-go 1.21.1
+go 1.21.2
 
 require golang.org/x/tools v0.13.0
 
diff --git a/tools/golangci-lint/go.mod b/tools/golangci-lint/go.mod
index ffbf8759..cf8e1486 100644
--- a/tools/golangci-lint/go.mod
+++ b/tools/golangci-lint/go.mod
@@ -1,6 +1,6 @@
 module _
 
-go 1.21.1
+go 1.21.2
 
 require github.com/golangci/golangci-lint v1.54.2