diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 3d465772c..b7b3d2d1b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -48,7 +48,7 @@ jobs:
       - uses: actions/checkout@v2
       - uses: actions/setup-go@v2
         with:
-          go-version: "1.19.7"
+          go-version: "1.19.8"
       - run: make node
 
   algorand:
@@ -255,7 +255,7 @@ jobs:
       - uses: actions/checkout@v2
       - uses: actions/setup-go@v2
         with:
-          go-version: "1.19.7"
+          go-version: "1.19.8"
       - run: |
           cd wormchain
           make proto -B
@@ -269,7 +269,7 @@ jobs:
       - uses: actions/checkout@v2
       - uses: actions/setup-go@v2
         with:
-          go-version: "1.19.7"
+          go-version: "1.19.8"
       - run: cd sdk/vaa && go test
 
   # Run Go linters
@@ -286,7 +286,7 @@ jobs:
       - uses: actions/checkout@v2
       - uses: actions/setup-go@v2
         with:
-          go-version: "1.19.7"
+          go-version: "1.19.8"
       - name: Install formatter
         run: go install golang.org/x/tools/cmd/goimports@latest
       - name: Formatting checks
@@ -315,7 +315,7 @@ jobs:
       - uses: actions/checkout@v2
       - uses: actions/setup-go@v2
         with:
-          go-version: "1.19.7"
+          go-version: "1.19.8"
       # The go-ethereum and celo-blockchain packages both implement secp256k1 using the exact same header, but that causes duplicate symbols.
       - name: Run golang tests
         run: cd node && go test -v -race -ldflags '-extldflags "-Wl,--allow-multiple-definition" ' ./...
diff --git a/Dockerfile.proto b/Dockerfile.proto
index 0694428c6..cf39ac9af 100644
--- a/Dockerfile.proto
+++ b/Dockerfile.proto
@@ -1,5 +1,5 @@
 # syntax=docker.io/docker/dockerfile:1.3@sha256:42399d4635eddd7a9b8a24be879d2f9a930d0ed040a61324cfdf59ef1357b3b2
-FROM docker.io/golang:1.19.3@sha256:dc76ef03e54c34a00dcdca81e55c242d24b34d231637776c4bb5c1a8e8514253 AS go-tools
+FROM golang:1.19.8@sha256:9f2dd04486e84eec72d945b077d568976981d9afed8b4e2aeb08f7ab739292b3 AS go-tools
 
 # Support additional root CAs
 COPY README.md cert.pem* /certs/
@@ -15,7 +15,7 @@ RUN --mount=type=cache,target=/root/.cache --mount=type=cache,target=/go \
 	cd /app/tools && CGO_ENABLED=0 ./build.sh
 
 # syntax=docker.io/docker/dockerfile:1.3@sha256:42399d4635eddd7a9b8a24be879d2f9a930d0ed040a61324cfdf59ef1357b3b2
-FROM docker.io/golang:1.19.3@sha256:dc76ef03e54c34a00dcdca81e55c242d24b34d231637776c4bb5c1a8e8514253 AS go-build
+FROM golang:1.19.8@sha256:9f2dd04486e84eec72d945b077d568976981d9afed8b4e2aeb08f7ab739292b3 AS go-build
 
 # Support additional root CAs
 COPY README.md cert.pem* /certs/
diff --git a/bitcoin/Dockerfile b/bitcoin/Dockerfile
index 4894c8fce..8f2112323 100644
--- a/bitcoin/Dockerfile
+++ b/bitcoin/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/golang:1.19.3@sha256:dc76ef03e54c34a00dcdca81e55c242d24b34d231637776c4bb5c1a8e8514253 AS bitcoin-build
+FROM docker.io/golang:1.19.8@sha256:9f2dd04486e84eec72d945b077d568976981d9afed8b4e2aeb08f7ab739292b3 AS bitcoin-build
 
 ARG ARCH=amd64
 
diff --git a/node/Dockerfile b/node/Dockerfile
index f5f51228b..06e967174 100644
--- a/node/Dockerfile
+++ b/node/Dockerfile
@@ -1,5 +1,5 @@
 # syntax=docker.io/docker/dockerfile:1.3@sha256:42399d4635eddd7a9b8a24be879d2f9a930d0ed040a61324cfdf59ef1357b3b2
-FROM --platform=linux/amd64 docker.io/golang:1.19.3@sha256:dc76ef03e54c34a00dcdca81e55c242d24b34d231637776c4bb5c1a8e8514253 AS build
+FROM --platform=linux/amd64 golang:1.19.8@sha256:9f2dd04486e84eec72d945b077d568976981d9afed8b4e2aeb08f7ab739292b3 AS build
 # libwasmvm.so is not compatible with arm
 
 # Support additional root CAs
@@ -26,7 +26,7 @@ RUN --mount=type=cache,target=/root/.cache --mount=type=cache,target=/go \
   cd node && \
   go build ${GO_BUILD_ARGS} -gcflags="all=-N -l" --ldflags '-extldflags "-Wl,--allow-multiple-definition" -X "github.com/certusone/wormhole/node/cmd/guardiand.Build=dev"' -mod=readonly -o /guardiand github.com/certusone/wormhole/node && \
   go get github.com/CosmWasm/wasmvm@v1.1.1 && \
-  cp /go/pkg/mod/github.com/!cosm!wasm/wasmvm@v1.1.1/internal/api/libwasmvm.x86_64.so /usr/lib/  
+  cp /go/pkg/mod/github.com/!cosm!wasm/wasmvm@v1.1.1/internal/api/libwasmvm.x86_64.so /usr/lib/
 
 # Only export the final binary (+ shared objects). This reduces the image size
 # from ~1GB to ~150MB.
diff --git a/scripts/Dockerfile.lint b/scripts/Dockerfile.lint
index 65b5690a5..abf4a5e7a 100644
--- a/scripts/Dockerfile.lint
+++ b/scripts/Dockerfile.lint
@@ -1,5 +1,5 @@
 # syntax=docker.io/docker/dockerfile:1.3@sha256:42399d4635eddd7a9b8a24be879d2f9a930d0ed040a61324cfdf59ef1357b3b2
-FROM docker.io/golang:1.19.3@sha256:dc76ef03e54c34a00dcdca81e55c242d24b34d231637776c4bb5c1a8e8514253
+FROM docker.io/golang:1.19.8@sha256:9f2dd04486e84eec72d945b077d568976981d9afed8b4e2aeb08f7ab739292b3
 
 RUN useradd -u 1000 -U -m -d /home/lint lint
 USER 1000
diff --git a/wormchain/Dockerfile b/wormchain/Dockerfile
index 657cf8f57..3e35dd9e0 100644
--- a/wormchain/Dockerfile
+++ b/wormchain/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/golang:1.19.0@sha256:4c00329e17be6fedd8bd4412df454a205348da00f9e0e5d763380a29eb096b75
+FROM docker.io/golang:1.19.8@sha256:9f2dd04486e84eec72d945b077d568976981d9afed8b4e2aeb08f7ab739292b3
 
 #used for a readiness probe
 RUN apt-get update
diff --git a/wormchain/ibc-relayer/Dockerfile b/wormchain/ibc-relayer/Dockerfile
index 86b3e8653..32b31f0bb 100644
--- a/wormchain/ibc-relayer/Dockerfile
+++ b/wormchain/ibc-relayer/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/golang:1.19.0@sha256:4c00329e17be6fedd8bd4412df454a205348da00f9e0e5d763380a29eb096b75
+FROM docker.io/golang:1.19.8@sha256:9f2dd04486e84eec72d945b077d568976981d9afed8b4e2aeb08f7ab739292b3
 
 #used for a readiness probe
 RUN apt-get update