diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index dd73a056f0..dc995feae0 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -7,6 +7,8 @@ stages:
 variables:
   DEBIAN_FRONTEND: noninteractive
   PATH: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/go/bin:/usr/local/go/bin
+  GO_VERSION: 1.25.8
+  GO_HASHSUM: ceb5e041bbc3893846bd1614d76cb4681c91dadee579426cf21a63f2d7e03be6
 
 build:
   stage: build
@@ -16,13 +18,13 @@ build:
     - apt install -qq -y build-essential libpng-dev libpng16-16 wget curl git
     - ulimit -n 8096
     - cd /tmp
-    - wget -q "https://go.dev/dl/go1.24.7.linux-amd64.tar.gz"
+    - wget -q "https://go.dev/dl/go${GO_VERSION}.linux-amd64.tar.gz"
     - >
       echo \
-        "da18191ddb7db8a9339816f3e2b54bdded8047cdc2a5d67059478f8d1595c43f  go1.24.7.linux-amd64.tar.gz" \
-        > go1.24.7.linux-amd64.tar.gz.sha256sum
-    - sha256sum -c go1.24.7.linux-amd64.tar.gz.sha256sum
-    - tar -C /usr/local -xzf go1.24.7.linux-amd64.tar.gz
+        "${GO_HASHSUM}  go${GO_VERSION}.linux-amd64.tar.gz" \
+        > "go${GO_VERSION}.linux-amd64.tar.gz.sha256sum"
+    - sha256sum -c "go${GO_VERSION}.linux-amd64.tar.gz.sha256sum"
+    - tar -C /usr/local -xzf "go${GO_VERSION}.linux-amd64.tar.gz"
     - cd -
   script:
     - >