diff --git a/.github/workflows/boilerplate.yaml b/.github/workflows/boilerplate.yaml
index 3782e5123..84729cfa7 100644
--- a/.github/workflows/boilerplate.yaml
+++ b/.github/workflows/boilerplate.yaml
@@ -27,7 +27,7 @@ jobs:
       - name: Check out code
         uses: actions/checkout@v3
 
-      - uses: chainguard-dev/actions/boilerplate@5e21cb47971231c078a677dfe89a348371cb880c # main
+      - uses: chainguard-dev/actions/boilerplate@29fb6e979a0b3efc79748a17e8cec08d0594cbfd # main
         with:
           extension: ${{ matrix.extension }}
           language: ${{ matrix.language }}
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 58d2fcb9d..69d2aa8bf 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -12,7 +12,7 @@ jobs:
 
     strategy:
       matrix:
-        go-version: [1.19, '1.20']
+        go-version: ['1.22', '1.23']
 
     steps:
       - uses: actions/checkout@v3
diff --git a/.github/workflows/bump-deps.yaml b/.github/workflows/bump-deps.yaml
index 3e3454697..a73000514 100644
--- a/.github/workflows/bump-deps.yaml
+++ b/.github/workflows/bump-deps.yaml
@@ -21,8 +21,7 @@ jobs:
     - uses: actions/checkout@v3
     - uses: actions/setup-go@v4
       with:
-        go-version: 1.19
-        check-latest: true
+        go-version-file: go.mod
 
     - run: ./hack/bump-deps.sh
     - name: Create Pull Request
diff --git a/.github/workflows/e2e.yaml b/.github/workflows/e2e.yaml
index f82e12783..8bba04b07 100644
--- a/.github/workflows/e2e.yaml
+++ b/.github/workflows/e2e.yaml
@@ -19,16 +19,16 @@ jobs:
     - uses: actions/checkout@v3
     - uses: actions/setup-go@v4
       with:
-        go-version: 1.19
-        check-latest: true
+        go-version-file: go.mod
 
     - name: crane append to an image, set the entrypoint, run it locally, roundtrip it
       shell: bash
       run: |
         set -euxo pipefail
 
-        # Setup local registry
+        # Setup local registry, wait a bit for it to come up.
         go run ./cmd/registry &
+        sleep 5
 
         base=alpine
         platform=linux/amd64
diff --git a/.github/workflows/ecr-auth.yaml b/.github/workflows/ecr-auth.yaml
index 755c36c55..54d56b3c3 100644
--- a/.github/workflows/ecr-auth.yaml
+++ b/.github/workflows/ecr-auth.yaml
@@ -21,8 +21,7 @@ jobs:
       - uses: actions/checkout@v3
       - uses: actions/setup-go@v4
         with:
-          go-version: 1.19
-          check-latest: true
+          go-version-file: go.mod
 
       - name: Install krane
         working-directory: ./cmd/krane
@@ -61,8 +60,7 @@ jobs:
       - uses: actions/checkout@v3
       - uses: actions/setup-go@v4
         with:
-          go-version: 1.19
-          check-latest: true
+          go-version-file: go.mod
 
       - name: Install crane
         working-directory: ./cmd/crane
diff --git a/.github/workflows/ghcr-auth.yaml b/.github/workflows/ghcr-auth.yaml
index 342013792..cfee6c3d1 100644
--- a/.github/workflows/ghcr-auth.yaml
+++ b/.github/workflows/ghcr-auth.yaml
@@ -17,8 +17,7 @@ jobs:
       - uses: actions/checkout@v3
       - uses: actions/setup-go@v4
         with:
-          go-version: 1.19
-          check-latest: true
+          go-version-file: go.mod
 
       - name: Install krane
         working-directory: ./cmd/krane
diff --git a/.github/workflows/presubmit.yaml b/.github/workflows/presubmit.yaml
index 87df8e85c..b308490b2 100644
--- a/.github/workflows/presubmit.yaml
+++ b/.github/workflows/presubmit.yaml
@@ -29,6 +29,5 @@ jobs:
       - uses: actions/checkout@v3
       - uses: actions/setup-go@v4
         with:
-          go-version: 1.19
-          check-latest: true
+          go-version-file: go.mod
       - run: ./hack/presubmit.sh
diff --git a/.github/workflows/style.yaml b/.github/workflows/style.yaml
index 29b0954d7..2e4bef942 100644
--- a/.github/workflows/style.yaml
+++ b/.github/workflows/style.yaml
@@ -10,11 +10,10 @@ jobs:
     name: check goimports
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@v3
       - uses: actions/setup-go@v4
         with:
-          go-version: 1.19
-          check-latest: true
-      - uses: actions/checkout@v3
+          go-version-file: go.mod
       - uses: chainguard-dev/actions/goimports@5e21cb47971231c078a677dfe89a348371cb880c # main
 
   lint:
@@ -25,8 +24,7 @@ jobs:
       - uses: actions/checkout@v3
       - uses: actions/setup-go@v4
         with:
-          go-version: 1.19
-          check-latest: true
+          go-version-file: go.mod
 
       - uses: golangci/golangci-lint-action@v3.4.0
         with:
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 721cce09e..9eca8613d 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -11,7 +11,7 @@ jobs:
   test:
     strategy:
       matrix:
-        go-version: [1.19, '1.20']
+        go-version: ['1.22', '1.23']
 
     name: Unit Tests
     runs-on: ubuntu-latest
diff --git a/cmd/krane/go.mod b/cmd/krane/go.mod
index 6b4f74bce..f835df11f 100644
--- a/cmd/krane/go.mod
+++ b/cmd/krane/go.mod
@@ -1,6 +1,6 @@
 module github.com/google/go-containerregistry/cmd/krane
 
-go 1.18
+go 1.23.1
 
 replace github.com/google/go-containerregistry => ../../
 
diff --git a/go.mod b/go.mod
index 323b6c64f..e5bcb59cd 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/google/go-containerregistry
 
-go 1.18
+go 1.23
 
 require (
 	github.com/containerd/stargz-snapshotter/estargz v0.14.3
diff --git a/pkg/authn/k8schain/go.mod b/pkg/authn/k8schain/go.mod
index 7d4e8cb0f..2a68d1c75 100644
--- a/pkg/authn/k8schain/go.mod
+++ b/pkg/authn/k8schain/go.mod
@@ -1,6 +1,6 @@
 module github.com/google/go-containerregistry/pkg/authn/k8schain
 
-go 1.18
+go 1.23
 
 replace (
 	github.com/google/go-containerregistry => ../../../
diff --git a/pkg/authn/kubernetes/go.mod b/pkg/authn/kubernetes/go.mod
index 94ed42534..2ec7312af 100644
--- a/pkg/authn/kubernetes/go.mod
+++ b/pkg/authn/kubernetes/go.mod
@@ -1,6 +1,6 @@
 module github.com/google/go-containerregistry/pkg/authn/kubernetes
 
-go 1.18
+go 1.23
 
 replace github.com/google/go-containerregistry => ../../../