diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b939127..fcf7f19 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,7 +19,7 @@ jobs:
           cache: npm
       - uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
         with:
-          go-version: '1.26.8'
+          go-version: '1.26.9'
           cache: true
       - run: npm ci
       - run: npm test
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 294dd4a..ff99b98 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -25,8 +25,8 @@ jobs:
         language: [javascript-typescript, go]
     steps:
       - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
-      - uses: github/codeql-action/init@c20e34f438d671fc35777cc9820dd7adf8252874 # v3
+      - uses: github/codeql-action/init@faaca9a8f6edddba5725ffe5adefdab6669a2eca # v3
         with:
           languages: ${{ matrix.language }}
-      - uses: github/codeql-action/autobuild@c20e34f438d671fc35777cc9820dd7adf8252874 # v3
-      - uses: github/codeql-action/analyze@c20e34f438d671fc35777cc9820dd7adf8252874 # v3
+      - uses: github/codeql-action/autobuild@faaca9a8f6edddba5725ffe5adefdab6669a2eca # v3
+      - uses: github/codeql-action/analyze@faaca9a8f6edddba5725ffe5adefdab6669a2eca # v3
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3c950e1..8606e21 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -19,7 +19,7 @@ jobs:
           cache: npm
       - uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
         with:
-          go-version: '1.26.8'
+          go-version: '1.26.9'
           cache: true
       - run: npm ci
       - run: npm test
@@ -53,7 +53,7 @@ jobs:
       - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
       - uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
         with:
-          go-version: '1.26.8'
+          go-version: '1.26.9'
           cache: true
       - name: Build
         env:
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index b705c6a..3008ee9 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -23,7 +23,7 @@ jobs:
           cache: npm
       - uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
         with:
-          go-version: '1.26.8'
+          go-version: '1.26.9'
           cache: true
       - run: npm ci
       - run: npm audit --audit-level=moderate
diff --git a/.gitleaks.toml b/.gitleaks.toml
index 7bdbac3..b317231 100644
--- a/.gitleaks.toml
+++ b/.gitleaks.toml
@@ -10,3 +10,19 @@ targetRules = ["generic-api-key"]
 regexTarget = "match"
 regexes = ['''invalid-secret-[0-9]+''']
 paths = ['''^cdx/src/transfer/transfer_test\.go$''']
+
+[[allowlists]]
+description = "Exact dummy values in test fixtures"
+condition = "AND"
+targetRules = ["generic-api-key"]
+regexTarget = "secret"
+regexes = ["^aO6Ww6lyA10XmqHEgQYHyA$"]
+paths = ["^cmd/cdx/detach_test\\.go$"]
+
+[[allowlists]]
+description = "Exact dummy values in test fixtures"
+condition = "AND"
+targetRules = ["generic-api-key"]
+regexTarget = "secret"
+regexes = ["^EBESExQVFhcYGRobHB0eHyAhIiMkJSYnKCkqKywtLi8$", "^iLGO6mZeaJglq0Dtlt7gVbXAxzfaRuuTB2EKU9pUzhI$", "^tv3A13vt67jg7N3OmSO\\-390R19s9pecIXKUhZ0p9IAg$"]
+paths = ["^fixtures/resume\\-v2\\.json$"]
diff --git a/README.md b/README.md
index 49b07cb..347edcd 100644
--- a/README.md
+++ b/README.md
@@ -70,7 +70,7 @@ expire on their own, and keep no file data.
 
 ## Develop
 
-Requires Node.js 24+, npm, and Go 1.26.8+.
+Requires Node.js 24+, npm, and Go 1.26.9+.
 
 ```bash
 npm ci
diff --git a/go.mod b/go.mod
index d8e9023..e599645 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/YashasVM/cd
 
-go 1.26.8
+go 1.26.9
 
 require (
 	github.com/gorilla/websocket v1.5.3
@@ -26,7 +26,7 @@ require (
 	github.com/pion/turn/v5 v5.1.2 // indirect
 	github.com/wlynxg/anet v0.0.5 // indirect
 	golang.org/x/crypto v0.57.0 // indirect
-	golang.org/x/net v0.59.0 // indirect
+	golang.org/x/net v0.60.0 // indirect
 	golang.org/x/sys v0.48.0 // indirect
 	golang.org/x/time v0.14.0 // indirect
 )
diff --git a/go.sum b/go.sum
index fbcad06..1f011fa 100644
--- a/go.sum
+++ b/go.sum
@@ -44,6 +44,8 @@ golang.org/x/crypto v0.57.0 h1:3ZVCjf8Ggz7zneR/EHRVx68Ctf+2pmIMP2UFhh9cC6M=
 golang.org/x/crypto v0.57.0/go.mod h1:Fdz0i5U6CoizGwLda9DttjSk6qlZo25zYNtR+ycvuZA=
 golang.org/x/net v0.59.0 h1:5zfYln+w5XCxwrnMMJPufRgNoXEaGxl0wo5GqPXyues=
 golang.org/x/net v0.59.0/go.mod h1:2DA/G1UfVbCpQPeWTmMPGY7Cs2PkBkwu743bVX5PIVg=
+golang.org/x/net v0.60.0 h1:79p50tfZlm0J9YfoDsSi639qSXNGVwEzOPLCxM2FsYU=
+golang.org/x/net v0.60.0/go.mod h1:2DA/G1UfVbCpQPeWTmMPGY7Cs2PkBkwu743bVX5PIVg=
 golang.org/x/sys v0.48.0 h1:bbX/i/6MgT9BVLM9RT1thmxL04yeTAhbEz4SyadbXoo=
 golang.org/x/sys v0.48.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og=
 golang.org/x/time v0.14.0 h1:MRx4UaLrDotUKUdCIqzPC48t1Y9hANFKIRpNx+Te8PI=