diff --git a/Dockerfile b/Dockerfile
index def3ed14..cb1a0795 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -6,7 +6,7 @@ FROM golang:1.25-alpine AS build
 WORKDIR /src
 
 # Cache module downloads before copying source (layer caching).
-COPY go.mod ./
+COPY go.mod go.sum ./
 RUN go mod download
 
 COPY . ./
diff --git a/go.mod b/go.mod
index 02f741ea..a09bf3cf 100644
--- a/go.mod
+++ b/go.mod
@@ -1,3 +1,16 @@
 module github.com/elfoundation/hatch
 
-go 1.25
+go 1.25.0
+
+require (
+	github.com/dustin/go-humanize v1.0.1 // indirect
+	github.com/google/uuid v1.6.0 // indirect
+	github.com/mattn/go-isatty v0.0.20 // indirect
+	github.com/ncruces/go-strftime v1.0.0 // indirect
+	github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
+	golang.org/x/sys v0.44.0 // indirect
+	modernc.org/libc v1.73.4 // indirect
+	modernc.org/mathutil v1.7.1 // indirect
+	modernc.org/memory v1.11.0 // indirect
+	modernc.org/sqlite v1.53.0 // indirect
+)