diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1d016d7673f..480b8800b61 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -66,7 +66,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           cache: false
-          go-version: 1.22.1
+          go-version: 1.22.2
       - name: Setup qemu
         uses: docker/setup-qemu-action@v3
       - name: Set up Docker Buildx
diff --git a/internal/ci/repo/repo.cue b/internal/ci/repo/repo.cue
index 4afa4c5a80c..9b818e6b3f2 100644
--- a/internal/ci/repo/repo.cue
+++ b/internal/ci/repo/repo.cue
@@ -37,7 +37,7 @@ latestStableGo: "1.22.x"
 // Use a specific latest version for release builds.
 // Note that we don't want ".x" for the sake of reproducibility,
 // so we instead pin a specific Go release.
-pinnedReleaseGo: "1.22.1"
+pinnedReleaseGo: "1.22.2"
 
 goreleaserVersion: "v1.24.0"
 
diff --git a/internal/cueversion/version.go b/internal/cueversion/version.go
index 0501d1aebcf..fc5c6791ccb 100644
--- a/internal/cueversion/version.go
+++ b/internal/cueversion/version.go
@@ -16,7 +16,7 @@ import (
 //
 // TODO: remove once Go stamps local builds with a main module version
 // derived from the local VCS information per https://go.dev/issue/50603.
-const fallbackVersion = "v0.8.1"
+const fallbackVersion = "v0.8.2"
 
 // Version returns the version of the cuelang.org/go module as best as can
 // reasonably be determined. The result is always a valid Go semver version.