diff --git a/.trivyignore b/.trivyignore
index cc28caa7..547903de 100644
--- a/.trivyignore
+++ b/.trivyignore
@@ -6,3 +6,7 @@
 # place so the fixed build is picked up the moment Chainguard publishes it --
 # remove this line at that point, not before.
 CVE-2026-85091
+
+# GO-2026-5932: x/crypto/openpgp is unmaintained and has no fix; we never import it
+# (only blake2b and pbkdf2). Remove this line if anything starts importing openpgp.
+GO-2026-5932
diff --git a/Dockerfile.adapter b/Dockerfile.adapter
index e10daedb..88af04d6 100644
--- a/Dockerfile.adapter
+++ b/Dockerfile.adapter
@@ -1,4 +1,4 @@
-FROM golang:1.26.9-bookworm AS builder
+FROM golang:1.26.10-bookworm AS builder
 
 WORKDIR /workspace/app
 COPY cmd/adapter  ./cmd/adapter
diff --git a/Dockerfile.adapter-with-plugins b/Dockerfile.adapter-with-plugins
index 12eca4ff..69970280 100644
--- a/Dockerfile.adapter-with-plugins
+++ b/Dockerfile.adapter-with-plugins
@@ -1,4 +1,4 @@
-FROM golang:1.26.9-bookworm AS builder
+FROM golang:1.26.10-bookworm AS builder
 
 WORKDIR /workspace/app
 
diff --git a/README.md b/README.md
index 156a4071..65ab756f 100644
--- a/README.md
+++ b/README.md
@@ -174,7 +174,7 @@ Results land in `benchmarks/results/<timestamp>/`. The latest committed report i
 
 ### Prerequisites
 
-- Go 1.26.9 or higher — the version `go.mod` requires, and the floor that
+- Go 1.26.10 or higher — the version `go.mod` requires, and the floor that
   clears the current Go standard-library advisories (`make security`)
 - Redis (for caching)
 - Docker (optional, for containerized deployment)
diff --git a/go.mod b/go.mod
index f7a62ba6..fa8584f8 100644
--- a/go.mod
+++ b/go.mod
@@ -1,9 +1,9 @@
 module github.com/beckn-one/beckn-onix
 
-go 1.26.9
+go 1.26.10
 
 require (
-	github.com/santhosh-tekuri/jsonschema/v6 v6.0.2
+	github.com/santhosh-tekuri/jsonschema/v6 v6.0.3
 	golang.org/x/crypto v0.57.0
 )
 
@@ -93,7 +93,7 @@ require (
 	github.com/alicebob/miniredis/v2 v2.37.0
 	github.com/beckn/catalog-core v0.2.0
 	github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.1
-	github.com/getkin/kin-openapi v0.144.0
+	github.com/getkin/kin-openapi v0.149.0
 	github.com/google/uuid v1.6.0
 	github.com/hashicorp/go-retryablehttp v0.7.8
 	github.com/hashicorp/vault/api v1.23.0
diff --git a/go.sum b/go.sum
index c9ec23f1..e1f29717 100644
--- a/go.sum
+++ b/go.sum
@@ -44,8 +44,8 @@ github.com/fortytw2/leaktest v1.3.0 h1:u8491cBMTQ8ft8aeV+adlcytMZylmA5nnwwkRZjI8
 github.com/fortytw2/leaktest v1.3.0/go.mod h1:jDsjWgpAGjm2CA7WthBh/CdZYEPF31XHquHwclZch5g=
 github.com/foxcpp/go-mockdns v1.2.0 h1:omK3OrHRD1IWJz1FuFBCFquhXslXoF17OvBS6JPzZF0=
 github.com/foxcpp/go-mockdns v1.2.0/go.mod h1:IhLeSFGed3mJIAXPH2aiRQB+kqz7oqu8ld2qVbOu7Wk=
-github.com/getkin/kin-openapi v0.144.0 h1:hIRcTH+KjLfkLpYU6bSSfdFpi0fZi1fp+hSPi4aQu9Y=
-github.com/getkin/kin-openapi v0.144.0/go.mod h1:3BH9M9XDe/y9M5DSvEocVYAYq1w0qrhJHjC/vZi0AaY=
+github.com/getkin/kin-openapi v0.149.0 h1:ZbhmVJ4yq5RZDUsyP8lcBcGMsjsaTqXEFt6isdtMDfA=
+github.com/getkin/kin-openapi v0.149.0/go.mod h1:1+BHDzstro+P5CKtPy1X4PfofnFgmRe6uvMy9+r9fKY=
 github.com/go-jose/go-jose/v4 v4.1.4 h1:moDMcTHmvE6Groj34emNPLs/qtYXRVcd6S7NHbHz3kA=
 github.com/go-jose/go-jose/v4 v4.1.4/go.mod h1:x4oUasVrzR7071A4TnHLGSPpNOm2a21K9Kf04k1rs08=
 github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
@@ -181,8 +181,8 @@ github.com/rs/zerolog v1.35.1 h1:m7xQeoiLIiV0BCEY4Hs+j2NG4Gp2o2KPKmhnnLiazKI=
 github.com/rs/zerolog v1.35.1/go.mod h1:EjML9kdfa/RMA7h/6z6pYmq1ykOuA8/mjWaEvGI+jcw=
 github.com/ryanuber/go-glob v1.0.0 h1:iQh3xXAumdQ+4Ufa5b25cRpC5TYKlno6hsv6Cb3pkBk=
 github.com/ryanuber/go-glob v1.0.0/go.mod h1:807d1WSdnB0XRJzKNil9Om6lcp/3a0v4qIHxIXzX/Yc=
-github.com/santhosh-tekuri/jsonschema/v6 v6.0.2 h1:KRzFb2m7YtdldCEkzs6KqmJw4nqEVZGK7IN2kJkjTuQ=
-github.com/santhosh-tekuri/jsonschema/v6 v6.0.2/go.mod h1:JXeL+ps8p7/KNMjDQk3TCwPpBy0wYklyWTfbkIzdIFU=
+github.com/santhosh-tekuri/jsonschema/v6 v6.0.3 h1:1EYB5IzjZawrrnELUi78f9fPu57HuXjmddZPjrls/28=
+github.com/santhosh-tekuri/jsonschema/v6 v6.0.3/go.mod h1:JXeL+ps8p7/KNMjDQk3TCwPpBy0wYklyWTfbkIzdIFU=
 github.com/segmentio/asm v1.2.1 h1:DTNbBqs57ioxAD4PrArqftgypG4/qNpXoJx8TVXxPR0=
 github.com/segmentio/asm v1.2.1/go.mod h1:BqMnlJP91P8d+4ibuonYZw9mfnzI9HfxselHZr5aAcs=
 github.com/sergi/go-diff v1.4.0 h1:n/SP9D5ad1fORl+llWyN+D6qoUETXNZARKjyY2/KVCw=