diff --git a/CHANGELOG.md b/CHANGELOG.md
index edabc53d5..05f18c31c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -17,6 +17,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Upgraded `next` to `^16.3.8`. [#1709](https://github.com/sourcebot-dev/sourcebot/pull/1709)
 - Upgraded `seroval` to `^1.6.8`, `proxy-addr` to `^2.0.8`, `shell-quote` to `^1.12.0`, and `@grpc/grpc-js` to `^1.14.6`. [#1713](https://github.com/sourcebot-dev/sourcebot/pull/1713)
 - Upgraded `engine.io` to `^6.6.11`, `source-map-js` to `^1.2.2`, `smol-toml` to `^1.9.0`, `fast-copy` to `^3.1.0`, and `dompurify` to `^3.4.16`. [#1714](https://github.com/sourcebot-dev/sourcebot/pull/1714)
+- Upgraded `golang.org/x/crypto` to `v0.56.0` and OpenTelemetry-Go exporters and SDK to `v1.45.0` in Zoekt. [#1716](https://github.com/sourcebot-dev/sourcebot/pull/1716)
 
 ## [5.1.15] - 2026-09-29
 
diff --git a/Dockerfile b/Dockerfile
index e18965663..17a85cb21 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -14,7 +14,7 @@ ARG NEXT_PUBLIC_SENTRY_BACKEND_DSN
 ARG NEXT_PUBLIC_BUILD_COMMIT_SHA
 
 FROM node:24-alpine3.23 AS node-alpine
-FROM golang:1.25-alpine AS go-alpine
+FROM golang:1.26-alpine AS go-alpine
 # ----------------------------------
 
 # ------ Build Zoekt ------
diff --git a/vendor/zoekt b/vendor/zoekt
index e7e8c1602..b762b16dd 160000
--- a/vendor/zoekt
+++ b/vendor/zoekt
@@ -1 +1 @@
-Subproject commit e7e8c16029084fb2b334b41b9bf0f69b3ef7e340
+Subproject commit b762b16dde4bee0eaae3faa56c7e195c8e2ad341