diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9254312..09b0f00 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -15,10 +15,11 @@ jobs:
       - uses: actions/setup-go@v5
         with:
           go-version-file: 'go.mod'
-          # go.mod pins a `toolchain` newer than the `go` line, so setup-go
-          # installs the older Go and GOTOOLCHAIN downloads the toolchain into
-          # the module cache; setup-go's cache tar then collides on those
-          # read-only toolchain files (tar: .../cgo: File exists). Skip caching.
+          # go.mod carries no `toolchain` line: its `go` directive is exactly the
+          # Go that setup-go installs. Caching stays off: when a `toolchain` line
+          # did exist, GOTOOLCHAIN downloaded it into the module cache and
+          # setup-go's cache tar collided on those read-only files
+          # (tar: .../cgo: File exists).
           cache: false
       - name: Build
         run: go build ./...
diff --git a/go.mod b/go.mod
index 93bb917..6532c3e 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/codefly-dev/service-s3
 
-go 1.27.0
+go 1.27.3
 
 require (
 	github.com/codefly-dev/core v0.3.4