diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 6d947fdc..15c7e537 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -55,7 +55,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
-          go-version: 1.21.x
+          go-version: 1.23.x
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
         uses: github/codeql-action/init@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 29c5139e..1d7f7980 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -101,7 +101,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
-          go-version: 1.21.x
+          go-version: 1.23.x
       - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1
         with:
           path: |
diff --git a/.github/workflows/verify-docgen.yml b/.github/workflows/verify-docgen.yml
index 568f4200..c96d6fb3 100644
--- a/.github/workflows/verify-docgen.yml
+++ b/.github/workflows/verify-docgen.yml
@@ -16,5 +16,5 @@ jobs:
       - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
       - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
-          go-version: "1.21.x"
+          go-version: "1.23.x"
       - run: ./docgen/verify.sh
diff --git a/.github/workflows/verify-licence.yml b/.github/workflows/verify-licence.yml
index 15ca970f..3dbc91a4 100644
--- a/.github/workflows/verify-licence.yml
+++ b/.github/workflows/verify-licence.yml
@@ -15,7 +15,7 @@ jobs:
       - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
       - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
-          go-version: "1.21.x"
+          go-version: "1.23.x"
       - name: Install addlicense
         run: go install github.com/google/addlicense@v1.1.1
       - name: Check license headers
diff --git a/.github/workflows/witness.yml b/.github/workflows/witness.yml
index c7fc3080..5cc31331 100644
--- a/.github/workflows/witness.yml
+++ b/.github/workflows/witness.yml
@@ -53,7 +53,7 @@ jobs:
           - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
           - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
             with:
-              go-version: 1.21.x
+              go-version: 1.23.x
 
           - if: ${{ inputs.artifact-download != '' }}
             uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8