diff --git a/go/go.mod b/go/go.mod
index d6b6acbc909..13e3f2b8a17 100644
--- a/go/go.mod
+++ b/go/go.mod
@@ -1,9 +1,9 @@
 module github.com/another-rex/osv.dev/go
 
-go 1.23.7
+go 1.25.0
 
 require (
 	github.com/google/go-cmp v0.7.0
 	github.com/ossf/osv-schema/bindings/go v0.0.0-20250318011049-e4c58d9a4a9e
-	golang.org/x/sync v0.12.0
+	golang.org/x/sync v0.20.0
 )
diff --git a/go/go.sum b/go/go.sum
index ea5e4edfea2..d21234e9f31 100644
--- a/go/go.sum
+++ b/go/go.sum
@@ -2,5 +2,5 @@ github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
 github.com/ossf/osv-schema/bindings/go v0.0.0-20250318011049-e4c58d9a4a9e h1:v/bSQI7UNOcg2i6iEtVKSQNSckOxutSrt8aYEHQobLU=
 github.com/ossf/osv-schema/bindings/go v0.0.0-20250318011049-e4c58d9a4a9e/go.mod h1:lILztSxHU7VsdlYqCnwgxSDBhbXMf7iEQWtldJCDXPo=
-golang.org/x/sync v0.12.0 h1:MHc5BpPuC30uJk597Ri8TV3CNZcTLu6B6z4lJy+g6Jw=
-golang.org/x/sync v0.12.0/go.mod h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA=
+golang.org/x/sync v0.20.0 h1:e0PTpb7pjO8GAtTs2dQ6jYa5BWYlMuX047Dco/pItO4=
+golang.org/x/sync v0.20.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=