diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 262b7ef9..43d2f6d0 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -17,7 +17,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
-          go-version: "1.22"
+          go-version: "1.23"
           check-latest: true
 
       - name: Build
diff --git a/.github/workflows/e2e.yaml b/.github/workflows/e2e.yaml
index 9ec1a782..37229d57 100644
--- a/.github/workflows/e2e.yaml
+++ b/.github/workflows/e2e.yaml
@@ -32,7 +32,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
-          go-version: "1.22"
+          go-version: "1.23"
           check-latest: true
 
       - name: Get test OIDC token
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 95839d3a..a557a68a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -21,7 +21,7 @@ jobs:
 
       - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
-          go-version: '1.22'
+          go-version: '1.23'
           check-latest: true
 
       - uses: imjasonh/setup-crane@31b88efe9de28ae0ffa220711af4b60be9435f6e # v0.4
diff --git a/.github/workflows/validate-release.yml b/.github/workflows/validate-release.yml
index d1eff214..a70cd061 100644
--- a/.github/workflows/validate-release.yml
+++ b/.github/workflows/validate-release.yml
@@ -15,7 +15,7 @@ jobs:
 
       - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
-          go-version: '1.22'
+          go-version: '1.23'
           check-latest: true
 
       - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1
diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
index b6cd5181..8ff4dc63 100644
--- a/.github/workflows/verify.yml
+++ b/.github/workflows/verify.yml
@@ -15,7 +15,7 @@ jobs:
       - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
       - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
-          go-version: '1.22'
+          go-version: '1.23'
           check-latest: true
       - name: Install addlicense
         run: go install github.com/google/addlicense@v1.0.0
@@ -36,12 +36,12 @@ jobs:
       - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
       - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
-          go-version: '1.22'
+          go-version: '1.23'
           check-latest: true
       - name: golangci-lint
         uses: golangci/golangci-lint-action@971e284b6050e8a5849b72094c50ab08da042db8 # v6.1.1
         with:
-          version: v1.59
+          version: v1.61
           args: --timeout 10m
 
   generate-docs:
@@ -51,7 +51,7 @@ jobs:
       - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
       - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
-          go-version: '1.22'
+          go-version: '1.23'
           check-latest: true
       - name: Check CLI docs are up to date
         run: ./hack/presubmit.sh
diff --git a/.golangci.yml b/.golangci.yml
index 047aa152..3121a66f 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -28,10 +28,10 @@ issues:
   - text: "SA1019: package golang.org/x/crypto/openpgp"
     linters:
     - staticcheck
+  exclude-dirs:
+    - internal/fork
   max-issues-per-linter: 0
   max-same-issues: 0
 run:
   issues-exit-code: 1
   timeout: 10m
-  skip-dirs:
-    - internal/fork
diff --git a/go.mod b/go.mod
index 3931a88a..d75088a2 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/sigstore/gitsign
 
-go 1.22.5
+go 1.23.2
 
 require (
 	github.com/coreos/go-oidc/v3 v3.11.0
diff --git a/internal/rekor/oid/oid_test.go b/internal/rekor/oid/oid_test.go
index 5ee76883..dadfcf19 100644
--- a/internal/rekor/oid/oid_test.go
+++ b/internal/rekor/oid/oid_test.go
@@ -51,7 +51,7 @@ func TestOID(t *testing.T) {
 	}
 
 	if diff := cmp.Diff(tlog, got); diff != "" {
-		t.Errorf(diff)
+		t.Error(diff)
 	}
 }