diff --git a/NEXT_CHANGELOG.md b/NEXT_CHANGELOG.md
index 409a875ad12..57dc5693dcf 100644
--- a/NEXT_CHANGELOG.md
+++ b/NEXT_CHANGELOG.md
@@ -9,3 +9,5 @@
 * Fixed `--force-pull` on `bundle summary` and `bundle open` so the flag bypasses the local state cache and reads state from the workspace.
 
 ### Dependency updates
+
+* Bump Go toolchain to 1.25.10 ([#5213](https://github.com/databricks/cli/pull/5213)).
diff --git a/bundle/internal/tf/codegen/go.mod b/bundle/internal/tf/codegen/go.mod
index 14ba8f47ebb..77e6de4ef13 100644
--- a/bundle/internal/tf/codegen/go.mod
+++ b/bundle/internal/tf/codegen/go.mod
@@ -2,7 +2,7 @@ module github.com/databricks/cli/bundle/internal/tf/codegen
 
 go 1.25.0
 
-toolchain go1.25.9
+toolchain go1.25.10
 
 require (
 	github.com/hashicorp/go-version v1.7.0
diff --git a/go.mod b/go.mod
index cf6e5ebcd56..29248e31c7d 100644
--- a/go.mod
+++ b/go.mod
@@ -2,7 +2,7 @@ module github.com/databricks/cli
 
 go 1.25.0
 
-toolchain go1.25.9
+toolchain go1.25.10
 
 require (
 	dario.cat/mergo v1.0.2 // BSD-3-Clause
diff --git a/tools/go.mod b/tools/go.mod
index 4abe5f0d47c..4b84239abcc 100644
--- a/tools/go.mod
+++ b/tools/go.mod
@@ -2,7 +2,7 @@ module github.com/databricks/cli/tools
 
 go 1.25.0
 
-toolchain go1.25.9
+toolchain go1.25.10
 
 require github.com/stretchr/testify v1.11.1
 
diff --git a/tools/task/go.mod b/tools/task/go.mod
index 0d38220ebaa..623da6fa617 100644
--- a/tools/task/go.mod
+++ b/tools/task/go.mod
@@ -2,7 +2,7 @@ module github.com/databricks/cli/tools/task
 
 go 1.25.8
 
-toolchain go1.25.9
+toolchain go1.25.10
 
 require (
 	cel.dev/expr v0.25.1 // indirect