diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index bf2c9ce70..6a1a401eb 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -17,7 +17,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
         with:
-          go-version: 1.27.3
+          go-version: 1.27.4
       - run: make NO_DOCKER=true release 
   docker-build:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 04a5952f4..7bf129954 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -19,7 +19,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
         with:
-          go-version: 1.27.3
+          go-version: 1.27.4
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v8
         with:
diff --git a/.github/workflows/unit-tests.yml b/.github/workflows/unit-tests.yml
index 0fbf54c72..806c0c802 100644
--- a/.github/workflows/unit-tests.yml
+++ b/.github/workflows/unit-tests.yml
@@ -19,7 +19,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
         with:
-          go-version: 1.27.3
+          go-version: 1.27.4
       - run: go test -test.timeout 20m $(go list ./... | grep -v bindings) -coverprofile=./cover.out -coverpkg=./...
       # upload the plaintext coverage report
       - name: Upload txt coverage report
diff --git a/.golangci.yml b/.golangci.yml
index 5a28d5d44..e3b1a6fcc 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -40,7 +40,7 @@ formatters:
     - goimports
 run:
   relative-path-mode: cfg
-  go: '1.27.3'
+  go: '1.27.4'
 output:
   formats:
     text:
diff --git a/Makefile b/Makefile
index 00e4c0973..eccfbfa1d 100644
--- a/Makefile
+++ b/Makefile
@@ -191,7 +191,7 @@ docker-prune:
 golangci_lint_version = v2.14.0
 docker_lint_cmd = docker run -e XDG_CACHE_HOME=/go/.cache -e GOMODCACHE=/go/.cache/pkg/mod -e GOCACHE=/go/.cache/go-build -e GOLANGCI_LINT_CACHE=/go/.cache/golangci-lint \
 	--user $(shell id -u):$(shell id -g) --rm -v ~/.cache:/go/.cache -v .:/smartnode --workdir /smartnode/ golangci/golangci-lint:${golangci_lint_version}-alpine golangci-lint
-local_lint_cmd = GOTOOLCHAIN=go1.27.3 go run github.com/golangci/golangci-lint/v2/cmd/golangci-lint@${golangci_lint_version}
+local_lint_cmd = GOTOOLCHAIN=go1.27.4 go run github.com/golangci/golangci-lint/v2/cmd/golangci-lint@${golangci_lint_version}
 .PHONY: lint
 lint:
 ifdef NO_DOCKER
diff --git a/docker/rocketpool-dockerfile b/docker/rocketpool-dockerfile
index 010f22eec..f73777585 100644
--- a/docker/rocketpool-dockerfile
+++ b/docker/rocketpool-dockerfile
@@ -1,4 +1,4 @@
-FROM --platform=$BUILDPLATFORM golang:1.27.3-bookworm AS smartnode_dependencies
+FROM --platform=$BUILDPLATFORM golang:1.27.4-bookworm AS smartnode_dependencies
 ARG BUILDPLATFORM
 
 # Install build tools
diff --git a/go.mod b/go.mod
index 0649d164b..fac45a502 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/rocket-pool/smartnode
 
-go 1.27.3
+go 1.27.4
 
 require (
 	github.com/ProtonMail/go-crypto v1.5.2
diff --git a/shared/services/rocketpool/assets/install/mainnet.env b/shared/services/rocketpool/assets/install/mainnet.env
index 9b42e4057..12dd78300 100644
--- a/shared/services/rocketpool/assets/install/mainnet.env
+++ b/shared/services/rocketpool/assets/install/mainnet.env
@@ -4,7 +4,7 @@
 # plataberget.env, ...): only keys present there replace these defaults.
 # TUI container-tag changes are set in the Compose process environment and win over both.
 
-RP_IMAGE_SMARTNODE=rocketpool/smartnode:v1.25.2-dev
+RP_IMAGE_SMARTNODE=rocketpool/smartnode:v1.25.2@sha256:1c5421d64d81b107d6deef3cd79c02ac0d6c5d334d4c4e3c87c7885c498cdfa5
 
 RP_IMAGE_GETH=ethereum/client-go:v1.17.10@sha256:5015dcab74ec5c9ef6584ada930ea353264a1c4e72383f256802e3178e10918c
 RP_IMAGE_NETHERMIND=nethermind/nethermind:2.2.2@sha256:57df9bfaaf4d577919b35a2c7b1582ee5bd1812b36a812bdf8ac88ff7dba524d
diff --git a/shared/version.txt b/shared/version.txt
index 512dc71f9..61b813d5e 100644
--- a/shared/version.txt
+++ b/shared/version.txt
@@ -1 +1 @@
-1.25.2-dev
+1.25.2