diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d6891c55..058ed219 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -104,7 +104,7 @@ jobs:
       - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
           # renovate: golang=go
-          go-version: '1.27.2'
+          go-version: '1.27.3'
 
       # Windows file versions and MSI versions only compare numbers, so every
       # 0.32.0 beta and the final release would all be 0.32.0.0 and MDM tools
@@ -562,7 +562,7 @@ jobs:
         background: true
         with:
           # renovate: golang=go
-          go-version: '1.27.2'
+          go-version: '1.27.3'
 
       # Steps that do not register services run in the background while Windows features install.
       - name: Download SQL Server media
@@ -1855,7 +1855,7 @@ jobs:
       - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
           # renovate: golang=go
-          go-version: '1.27.2'
+          go-version: '1.27.3'
 
       # Only the lint step targets Windows; the action installs the Linux
       # golangci-lint binary for the runner.
diff --git a/go.mod b/go.mod
index 56281e36..1d5e201b 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/prometheus-community/windows_exporter
 
-go 1.27.2
+go 1.27.0
 
 require (
 	github.com/alecthomas/kingpin/v2 v2.4.0
diff --git a/renovate.json b/renovate.json
index b893f770..970da30f 100644
--- a/renovate.json
+++ b/renovate.json
@@ -67,6 +67,13 @@
       "enabled": true,
       "matchDepNames": ["go", "golang"],
       "groupName": "go version"
+    },        
+    {
+      "matchManagers": ["gomod"],
+      "matchDepNames": ["go"],
+      "matchDepTypes": ["golang"],
+      "allowedVersions": "/^\\d+\\.\\d+\\.0$/",
+      "rangeStrategy": "bump"
     },
     {
       "enabled": true,