diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 19ef10b..e793b78 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -44,7 +44,7 @@ jobs:
       - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
-          go-version: 1.27.2
+          go-version: 1.27.3
       - run: go version
       - run: CGO_ENABLED=0 go vet ./...
       - run: CGO_ENABLED=0 go build ./...
@@ -115,7 +115,7 @@ jobs:
       - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
-          go-version: 1.27.2
+          go-version: 1.27.3
       - run: CGO_ENABLED=0 go vet ./...
       - run: CGO_ENABLED=0 go build ./...
       - run: CGO_ENABLED=0 go test ./...
@@ -152,7 +152,7 @@ jobs:
       - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
-          go-version: 1.27.2
+          go-version: 1.27.3
       - run: go vet ./...
         env:
           CGO_ENABLED: "0"
@@ -202,7 +202,7 @@ jobs:
       - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
-          go-version: 1.27.2
+          go-version: 1.27.3
       - name: Build (${{ matrix.goos }}/${{ matrix.goarch }})
         run: CGO_ENABLED=0 GOOS=${{ matrix.goos }} GOARCH=${{ matrix.goarch }} go build ./...
       - name: Vet (${{ matrix.goos }}/${{ matrix.goarch }})
@@ -219,7 +219,7 @@ jobs:
       - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
-          go-version: 1.27.2
+          go-version: 1.27.3
       - name: arm64 links CGO-free
         run: CGO_ENABLED=0 GOOS=android GOARCH=arm64 go build ./...
       - name: The android tests compile
@@ -251,7 +251,7 @@ jobs:
       - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
-          go-version: 1.27.2
+          go-version: 1.27.3
       - run: go env GOARCH && CGO_ENABLED=0 go test ./...
 
   arch-qemu:
@@ -269,7 +269,7 @@ jobs:
       - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
-          go-version: 1.27.2
+          go-version: 1.27.3
       # ⛔ `qemu-user-static` is a VIRTUAL package on Ubuntu 26.04, which
       # `ubuntu-latest` became on 2026-10-19, and apt refuses to choose between its
       # two providers:
@@ -318,7 +318,7 @@ jobs:
       - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
-          go-version: 1.27.2
+          go-version: 1.27.3
       - name: Install X utilities
         run: sudo apt-get update && sudo apt-get install -y xvfb x11-apps xdotool imagemagick dbus
       - name: Run live integration test under Xvfb
@@ -356,7 +356,7 @@ jobs:
       - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
-          go-version: 1.27.2
+          go-version: 1.27.3
       - name: Install a headless Wayland compositor + capture/keymap tools
         run: sudo apt-get update && sudo apt-get install -y sway grim libxkbcommon-tools dbus
       - name: Run live integration test under sway (headless)
@@ -418,7 +418,7 @@ jobs:
       - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
-          go-version: 1.27.2
+          go-version: 1.27.3
       - name: Install an X server and capture tools
         run: sudo apt-get update && sudo apt-get install -y xvfb xdotool imagemagick
       - name: Run the HiDPI proof under a 192 dpi desktop
@@ -456,7 +456,7 @@ jobs:
       - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
-          go-version: 1.27.2
+          go-version: 1.27.3
       - name: Install a headless Wayland compositor + capture tools
         run: sudo apt-get update && sudo apt-get install -y sway grim dbus
       - name: Run the HiDPI proof under a scale-2 sway
@@ -515,7 +515,7 @@ jobs:
       - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
-          go-version: 1.27.2
+          go-version: 1.27.3
       - name: Install GTK4 runtime + a headless X server
         run: sudo apt-get update && sudo apt-get install -y --no-install-recommends libgtk-4-1 xvfb xauth
       - name: internal/gtk on real GTK4