diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 241ca352..f9f62ccb 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        go: [ 1.21.x, 1.22.x, 1.23.x, tip ]
+        go: [ 1.22.x, 1.23.x, tip ]
 
     steps:
       - name: Set up Go stable
@@ -21,6 +21,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           go-version: ${{ matrix.go }}
+          check-latest: true
       - name: Set up Go tip
         if: matrix.go == 'tip'
         run: |
@@ -52,6 +53,15 @@ jobs:
         env:
           CGO_ENABLED: 1
 
+      - name: Govulncheck
+        if: matrix.go != 'tip'
+        id: govulncheck
+        uses: golang/govulncheck-action@v1
+        with:
+          go-version-input: ${{ matrix.go }}
+          check-latest: true
+          go-package: ./...
+
       - name: Check Docker images
         run: |
           make image
@@ -80,4 +90,3 @@ jobs:
         run: make DEVEL=1 packagecloud-autobuilds
         env:
           PACKAGECLOUD_TOKEN: ${{ secrets.PACKAGECLOUD_TOKEN }}
-
diff --git a/go.mod b/go.mod
index 8eb62247..857d19ef 100644
--- a/go.mod
+++ b/go.mod
@@ -1,7 +1,8 @@
 module github.com/go-graphite/go-carbon
 
-go 1.21
-toolchain go1.22.9
+go 1.22
+
+toolchain go1.23.5
 
 require (
 	cloud.google.com/go/pubsub v1.45.3