diff --git a/MODULE.bazel b/MODULE.bazel
index c5135a076..f86159cc7 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -56,6 +56,11 @@ bazel_dep(
     # In released versions: dev_dependency = True
 )
 
+go_sdk = use_extension("@io_bazel_rules_go//go:extensions.bzl", "go_sdk")
+
+# Matches toolchain in go.mod
+go_sdk.download(version = "1.23.4")
+
 go_deps = use_extension(
     "@gazelle//:extensions.bzl",
     "go_deps",
diff --git a/go.mod b/go.mod
index b66957714..551853dc1 100644
--- a/go.mod
+++ b/go.mod
@@ -2,7 +2,7 @@ module github.com/bazel-contrib/bazel-lib
 
 go 1.21.1
 
-toolchain go1.23.2
+toolchain go1.23.4
 
 require (
 	github.com/bazelbuild/rules_go v0.50.1