diff --git a/.github/workflows/backend-ci.yml b/.github/workflows/backend-ci.yml
index ddf21f7a2..bb0e9cebb 100644
--- a/.github/workflows/backend-ci.yml
+++ b/.github/workflows/backend-ci.yml
@@ -28,7 +28,7 @@ jobs:
             - name: Set up Go
               uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
               with:
-                  go-version: "1.24"
+                  go-version: "1.25"
                   cache: true
                   cache-dependency-path: veza-backend-api/go.sum
 
@@ -153,7 +153,7 @@ jobs:
             - name: Set up Go
               uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
               with:
-                  go-version: "1.24"
+                  go-version: "1.25"
                   cache: true
                   cache-dependency-path: veza-backend-api/go.sum
 
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 67c18cd33..3ecec8279 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -25,7 +25,7 @@ jobs:
             - name: Set up Go
               uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
               with:
-                  go-version: "1.24"
+                  go-version: "1.25"
                   cache: true
                   # go.mod/go.sum live under veza-backend-api, not repo root.
                   # Without this, setup-go warns "Dependencies file is not
diff --git a/.github/workflows/go-fuzz.yml b/.github/workflows/go-fuzz.yml
index fdf6c309b..2762d8ca6 100644
--- a/.github/workflows/go-fuzz.yml
+++ b/.github/workflows/go-fuzz.yml
@@ -24,7 +24,7 @@ jobs:
             - name: Set up Go
               uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
               with:
-                  go-version: "1.24"
+                  go-version: "1.25"
                   cache: true
 
             - name: Download deps
diff --git a/veza-backend-api/cmd/api/main.go b/veza-backend-api/cmd/api/main.go
index 2525c61ac..85f455ba7 100644
--- a/veza-backend-api/cmd/api/main.go
+++ b/veza-backend-api/cmd/api/main.go
@@ -5,6 +5,7 @@ import (
 	"fmt"
 	"log"
 	"net/http"
+
 	// SECURITY(REM-027): pprof removed from production — use build tag or dedicated debug binary instead.
 	// To enable: go build -tags debug ./cmd/api
 	"os"
diff --git a/veza-backend-api/internal/api/handlers/chat_handlers.go b/veza-backend-api/internal/api/handlers/chat_handlers.go
index de7a473c6..bd61c0eae 100644
--- a/veza-backend-api/internal/api/handlers/chat_handlers.go
+++ b/veza-backend-api/internal/api/handlers/chat_handlers.go
@@ -10,7 +10,6 @@ import (
 	"strconv"
 
 	"github.com/gin-gonic/gin"
-	"github.com/google/uuid"
 	"go.uber.org/zap"
 
 	"veza-backend-api/internal/services"
diff --git a/veza-backend-api/internal/handlers/auth_integration_test.go b/veza-backend-api/internal/handlers/auth_integration_test.go
index aeda648b1..e83ac4fa2 100644
--- a/veza-backend-api/internal/handlers/auth_integration_test.go
+++ b/veza-backend-api/internal/handlers/auth_integration_test.go
@@ -5,13 +5,11 @@ package handlers
 
 import (
 	"bytes"
-	"context"
 	"encoding/json"
 	"net/http"
 	"net/http/httptest"
 	"strings"
 	"testing"
-	"time"
 
 	"veza-backend-api/internal/core/auth"
 	"veza-backend-api/internal/database"
@@ -26,7 +24,6 @@ import (
 	"github.com/google/uuid"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
-	"go.uber.org/zap"
 	"go.uber.org/zap/zaptest"
 	"gorm.io/driver/sqlite"
 	"gorm.io/gorm"