diff --git a/e2e/go-plugin/go.mod b/e2e/go-plugin/go.mod
index 0e264b4edd..01a0e026f0 100644
--- a/e2e/go-plugin/go.mod
+++ b/e2e/go-plugin/go.mod
@@ -2,6 +2,8 @@ module dice
 
 go 1.25.0
 
+toolchain go1.26.10
+
 replace github.com/launchdarkly/observability-sdk/go => ../../go
 
 require (
diff --git a/e2e/go/Dockerfile b/e2e/go/Dockerfile
index 632468a9d2..fbc1134cf0 100644
--- a/e2e/go/Dockerfile
+++ b/e2e/go/Dockerfile
@@ -1,7 +1,7 @@
 ARG IMAGE_BASE_NAME="ghcr.io/highlight/e2e:latest"
 FROM ${IMAGE_BASE_NAME}
 
-ARG GO_VERSION=1.23.1
+ARG GO_VERSION=1.26.10
 
 WORKDIR /opt/go
 RUN wget https://go.dev/dl/go${GO_VERSION}.linux-amd64.tar.gz
diff --git a/e2e/go/go.mod b/e2e/go/go.mod
index 059dacd59c..35efa00dd6 100644
--- a/e2e/go/go.mod
+++ b/e2e/go/go.mod
@@ -2,6 +2,8 @@ module github.com/highlight/highlight/e2e/go
 
 go 1.25.0
 
+toolchain go1.26.10
+
 replace github.com/highlight/highlight/sdk/highlight-go => ../../sdk/highlight-go
 
 require (
diff --git a/e2e/nextjs/go-service/go.mod b/e2e/nextjs/go-service/go.mod
index 9624802038..7a3808afcd 100644
--- a/e2e/nextjs/go-service/go.mod
+++ b/e2e/nextjs/go-service/go.mod
@@ -2,6 +2,8 @@ module github.com/deltaespilon/distributed-tracing
 
 go 1.25.0
 
+toolchain go1.26.10
+
 require (
 	github.com/go-chi/chi/v5 v5.2.5
 	github.com/highlight/highlight/sdk/highlight-go v0.10.2
diff --git a/e2e/opentelemetry/go/go.mod b/e2e/opentelemetry/go/go.mod
index 68baa35574..2489dd5575 100644
--- a/e2e/opentelemetry/go/go.mod
+++ b/e2e/opentelemetry/go/go.mod
@@ -2,6 +2,8 @@ module otel-dice
 
 go 1.25.0
 
+toolchain go1.26.10
+
 require (
 	go.opentelemetry.io/contrib/bridges/otelslog v0.13.0
 	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0
diff --git a/e2e/python-plugin-flask/poetry.lock b/e2e/python-plugin-flask/poetry.lock
index 44a7834d36..d0ac0b1fac 100644
--- a/e2e/python-plugin-flask/poetry.lock
+++ b/e2e/python-plugin-flask/poetry.lock
@@ -189,14 +189,14 @@ files = [
 
 [[package]]
 name = "certifi"
-version = "2025.6.15"
+version = "2026.10.19"
 description = "Python package for providing Mozilla's CA Bundle."
 optional = false
 python-versions = ">=3.7"
 groups = ["main"]
 files = [
-    {file = "certifi-2025.6.15-py3-none-any.whl", hash = "sha256:2e0c7ce7cb5d8f8634ca55d2ba7e6ec2689a2fd6537d8dec1296a477a4910057"},
-    {file = "certifi-2025.6.15.tar.gz", hash = "sha256:d747aa5a8b9bbbb1bb8c22bb13e22bd1f18e9796defa16bab421f7f7a317323b"},
+    {file = "certifi-2026.10.19-py3-none-any.whl", hash = "sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b"},
+    {file = "certifi-2026.10.19.tar.gz", hash = "sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae"},
 ]
 
 [[package]]
diff --git a/e2e/python/poetry.lock b/e2e/python/poetry.lock
index 5225d872de..08ce8a0983 100644
--- a/e2e/python/poetry.lock
+++ b/e2e/python/poetry.lock
@@ -321,14 +321,14 @@ zstd = ["zstandard (==0.22.0)"]
 
 [[package]]
 name = "certifi"
-version = "2025.1.31"
+version = "2026.10.19"
 description = "Python package for providing Mozilla's CA Bundle."
 optional = false
-python-versions = ">=3.6"
+python-versions = ">=3.7"
 groups = ["main"]
 files = [
-    {file = "certifi-2025.1.31-py3-none-any.whl", hash = "sha256:ca78db4565a652026a4db2bcdf68f2fb589ea80d0be70e03929ed730746b84fe"},
-    {file = "certifi-2025.1.31.tar.gz", hash = "sha256:3d5da6925056f6f18f119200434a4780a94263f10d1c21d032a6f6b2baa20651"},
+    {file = "certifi-2026.10.19-py3-none-any.whl", hash = "sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b"},
+    {file = "certifi-2026.10.19.tar.gz", hash = "sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae"},
 ]
 
 [[package]]
diff --git a/e2e/tests/poetry.lock b/e2e/tests/poetry.lock
index 0ee61ee6a3..edd07f2780 100644
--- a/e2e/tests/poetry.lock
+++ b/e2e/tests/poetry.lock
@@ -165,14 +165,14 @@ files = [
 
 [[package]]
 name = "certifi"
-version = "2024.7.4"
+version = "2026.10.19"
 description = "Python package for providing Mozilla's CA Bundle."
 optional = false
-python-versions = ">=3.6"
+python-versions = ">=3.7"
 groups = ["main"]
 files = [
-    {file = "certifi-2024.7.4-py3-none-any.whl", hash = "sha256:c198e21b1289c2ab85ee4e67bb4b4ef3ead0892059901a8d5b622f24a1101e90"},
-    {file = "certifi-2024.7.4.tar.gz", hash = "sha256:5a1e7645bc0ec61a09e26c36f6106dd4cf40c6db3a1fb6352b0244e7fb057c7b"},
+    {file = "certifi-2026.10.19-py3-none-any.whl", hash = "sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b"},
+    {file = "certifi-2026.10.19.tar.gz", hash = "sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae"},
 ]
 
 [[package]]
diff --git a/go/go.mod b/go/go.mod
index 58c45975a7..2f568e3922 100644
--- a/go/go.mod
+++ b/go/go.mod
@@ -2,6 +2,8 @@ module github.com/launchdarkly/observability-sdk/go
 
 go 1.25.0
 
+toolchain go1.26.10
+
 require (
 	github.com/Khan/genqlient v0.8.1
 	github.com/samber/lo v1.51.0
diff --git a/sdk/@launchdarkly/observability-python/poetry.lock b/sdk/@launchdarkly/observability-python/poetry.lock
index 3606b24c47..aea08d4a0c 100644
--- a/sdk/@launchdarkly/observability-python/poetry.lock
+++ b/sdk/@launchdarkly/observability-python/poetry.lock
@@ -236,14 +236,14 @@ files = [
 
 [[package]]
 name = "certifi"
-version = "2025.6.15"
+version = "2026.10.19"
 description = "Python package for providing Mozilla's CA Bundle."
 optional = false
 python-versions = ">=3.7"
 groups = ["main"]
 files = [
-    {file = "certifi-2025.6.15-py3-none-any.whl", hash = "sha256:2e0c7ce7cb5d8f8634ca55d2ba7e6ec2689a2fd6537d8dec1296a477a4910057"},
-    {file = "certifi-2025.6.15.tar.gz", hash = "sha256:d747aa5a8b9bbbb1bb8c22bb13e22bd1f18e9796defa16bab421f7f7a317323b"},
+    {file = "certifi-2026.10.19-py3-none-any.whl", hash = "sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b"},
+    {file = "certifi-2026.10.19.tar.gz", hash = "sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae"},
 ]
 
 [[package]]
@@ -3424,4 +3424,4 @@ dev = ["azure-functions", "black", "blinker", "django", "fastapi", "flask", "fun
 [metadata]
 lock-version = "2.1"
 python-versions = ">=3.10,<4"
-content-hash = "42cd9d024fd4fa9696ebee9b3053f2dcbba62dd1e2ff934743bb9becf6144584"
+content-hash = "8e0eb6f8c305072bbc76a73f57561dcca0bb1be0847e76bdbb1457dee4ae5e15"
diff --git a/sdk/@launchdarkly/observability-python/pyproject.toml b/sdk/@launchdarkly/observability-python/pyproject.toml
index 9beee769f4..814fb7d378 100644
--- a/sdk/@launchdarkly/observability-python/pyproject.toml
+++ b/sdk/@launchdarkly/observability-python/pyproject.toml
@@ -70,6 +70,8 @@ dependencies = [
     "opentelemetry-instrumentation-wsgi==0.55b1",
     "urllib3>=2.7.0",
     "requests>=2.33.0",
+    # >= 2026.10.19 drops the compromised eMudhra intermediates from the CA bundle.
+    "certifi>=2026.10.19",
     "ariadne-codegen (>=0.14.0,<0.15.0)",
     "launchdarkly-server-sdk (>=9.12.0, < 10.0.0)",
     "launchdarkly-server-sdk-otel (>=1.2.0, < 2.0.0)",
diff --git a/sdk/highlight-go/go.mod b/sdk/highlight-go/go.mod
index 9a39e1673c..223eea28b5 100644
--- a/sdk/highlight-go/go.mod
+++ b/sdk/highlight-go/go.mod
@@ -2,6 +2,8 @@ module github.com/highlight/highlight/sdk/highlight-go
 
 go 1.25.0
 
+toolchain go1.26.10
+
 require (
 	github.com/99designs/gqlgen v0.17.71
 	github.com/gin-gonic/gin v1.10.1
diff --git a/sdk/highlight-py/poetry.lock b/sdk/highlight-py/poetry.lock
index 10171b38b2..76526061d8 100644
--- a/sdk/highlight-py/poetry.lock
+++ b/sdk/highlight-py/poetry.lock
@@ -185,14 +185,14 @@ files = [
 
 [[package]]
 name = "certifi"
-version = "2025.1.31"
+version = "2026.10.19"
 description = "Python package for providing Mozilla's CA Bundle."
 optional = false
-python-versions = ">=3.6"
+python-versions = ">=3.7"
 groups = ["main"]
 files = [
-    {file = "certifi-2025.1.31-py3-none-any.whl", hash = "sha256:ca78db4565a652026a4db2bcdf68f2fb589ea80d0be70e03929ed730746b84fe"},
-    {file = "certifi-2025.1.31.tar.gz", hash = "sha256:3d5da6925056f6f18f119200434a4780a94263f10d1c21d032a6f6b2baa20651"},
+    {file = "certifi-2026.10.19-py3-none-any.whl", hash = "sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b"},
+    {file = "certifi-2026.10.19.tar.gz", hash = "sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae"},
 ]
 
 [[package]]
@@ -2960,4 +2960,4 @@ type = ["pytest-mypy"]
 [metadata]
 lock-version = "2.1"
 python-versions = ">=3.10,<4"
-content-hash = "eb758504b5f1a0b0fd9197ae14f364a75000283375bd437faf8abf4113ce86b6"
+content-hash = "70e7c11bab30175013b1bea84012c63042bdbc45ba7a0db6fdf98cec1480be17"
diff --git a/sdk/highlight-py/pyproject.toml b/sdk/highlight-py/pyproject.toml
index 2d0f9b7e18..054d68b16e 100644
--- a/sdk/highlight-py/pyproject.toml
+++ b/sdk/highlight-py/pyproject.toml
@@ -73,6 +73,8 @@ opentelemetry-instrumentation-weaviate = "0.33.12"
 opentelemetry-instrumentation-wsgi = "0.49b2"
 urllib3 = "^2.6.3"
 requests = "^2.33.0"
+# >= 2026.10.19 drops the compromised eMudhra intermediates from the CA bundle.
+certifi = ">=2026.10.19"
 
 [tool.poetry.group.dev.dependencies]
 azure-functions = "^1"