diff --git a/.gitignore b/.gitignore
index f97e51a..666acf4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,3 @@
 compiler-rt-18.1.8.src.tar.xz
-go1.25.7-1-openssl-fips.tar.gz
-go1.25.7.src.tar.gz
+go1.25.8-1-openssl-fips.tar.gz
+go1.25.8.src.tar.gz
diff --git a/golang.spec b/golang.spec
index 2a163ea..ec754d6 100644
--- a/golang.spec
+++ b/golang.spec
@@ -125,7 +125,7 @@
 %global go_api 1.25
 # Use only for prerelease versions
 #global go_prerelease rc3
-%global go_patch 7
+%global go_patch 8
 %global go_version %{go_api}%{?go_patch:.%{go_patch}}%{?go_prerelease:~%{go_prerelease}}
 %global go_source %{go_api}%{?go_patch:.%{go_patch}}%{?go_prerelease}
 # Go FIPS package release
@@ -747,6 +747,9 @@ fi
 
 %changelog
 ## START: Generated by rpmautospec
+* Tue Mar 24 2026 dbenoit <dbenoit@redhat.com> - 1.25.8-1
+- Update to Go 1.25.8 (fips-1)
+
 * Thu Feb 12 2026 dbenoit <dbenoit@redhat.com> - 1.25.7-1
 - Rebase to latest rhel-10-main (170a5b7e084)
 
diff --git a/sources b/sources
index b880db3..dd6aaab 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
 SHA512 (compiler-rt-18.1.8.src.tar.xz) = fb8795bd51c9b005c2ad1975591e9e2715740d6407ccad41379f136ef2e8d24ded8b97b01165a3ae4bd377119a6a1049ca05d3220404fc12bee86114ff2bff0d
-SHA512 (go1.25.7-1-openssl-fips.tar.gz) = de6dd32432023b2e3509fac46d77daa1ee5edd5b9a310c4da5421d46a2c6033ecef27327eb219b46b1d7fdd2471f31c00ff920bbb59633da3e1a18e4dff6fd37
-SHA512 (go1.25.7.src.tar.gz) = 054fdb8219d18a7942c524d8acc3c942d0a7b8f1c01b96184fa79017b6548533798f5f48cc78f7ecfb70da504c5c66569377a35d517a0e3184c32fe84c9ee0b6
+SHA512 (go1.25.8-1-openssl-fips.tar.gz) = e5e3b0236bdb024bda4be625e5d2ea6c8d764273b672fc629e218f1da6e98efc5766217f4b51f713f66b7a0f621ce34cf432440193a592390dfe295f5937c852
+SHA512 (go1.25.8.src.tar.gz) = 2f5c9f314d18169985a9a4b19346e00dd5d4b396c8c17bfffe5719e51f27d834cc9649d0165f7eeb7367d3b6d384f49917325a40b49ba4da65e22f2c5362c739