diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index d08cfac..439169f 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -16,7 +16,7 @@ jobs:
     name: go-test
     strategy:
       matrix:
-        go-version: [1.22.x, 1.23.x, 1.24.x]
+        go-version: [1.23.x, 1.24.x]
         platform: [ubuntu-latest]
     runs-on: ${{ matrix.platform }}
     steps:
diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml
index 5e0c06d..d1b3347 100644
--- a/.github/workflows/golangci-lint.yml
+++ b/.github/workflows/golangci-lint.yml
@@ -1,6 +1,3 @@
-# This file was copied from the following URL and modified:
-# https://github.com/golangci/golangci-lint-action/blob/master/README.md#how-to-use
-
 name: golangci-lint
 on:
   push:
@@ -22,12 +19,10 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
         with:
-          go-version: 1.22.x
-          cache: false
+          go-version: 1.23.x
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v6
         with:
-          version: v1.54 # current version at time of commit
           args: --timeout=10m
           # Only show new issues in a PR but show all issues for pushes
           only-new-issues: ${{ github.event_name == 'pull_request' && 'true' || 'false' }}
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index e9480f1..4d96f05 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -11,6 +11,8 @@ concurrency: ${{ github.ref }}
 jobs:
   create-draft-release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     outputs:
       RELEASE_ID: ${{ steps.create-release.outputs.result }}
     steps:
@@ -60,7 +62,7 @@ jobs:
           fetch-depth: '0'
       - uses: actions/setup-go@v5
         with:
-          go-version: 1.22.x
+          go-version: 1.23.x
       - name: Build binary
         run: GOOS=${{ matrix.os }} GOARCH=${{ matrix.arch }} make build
       - name: Upload release asset
@@ -157,6 +159,8 @@ jobs:
 
   finalize-release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     needs: [create-draft-release, build-binaries, build-images]
     steps:
       - uses: actions/github-script@v7
diff --git a/go.mod b/go.mod
index 09380de..f4c5366 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/blinklabs-io/cdnsd
 
-go 1.22.11
+go 1.23.6
 
 require (
 	github.com/blinklabs-io/adder v0.26.0