diff --git a/.github/renovate.json b/.github/renovate.json
index 9ffe42d1..8570f916 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -12,7 +12,7 @@
   ],
   "commitMessageAction": "Renovate: Update",
   "constraints": {
-    "go": "1.22"
+    "go": "1.23"
   },
   "dependencyDashboardOSVVulnerabilitySummary": "all",
   "osvVulnerabilityAlerts": true,
@@ -25,7 +25,7 @@
       "matchPackageNames": [
         "golang"
       ],
-      "allowedVersions": "1.22.x"
+      "allowedVersions": "1.23.x"
     },
     {
       "matchPackageNames": [
diff --git a/.github/workflows/checks.yaml b/.github/workflows/checks.yaml
index 855adbe4..34c1288e 100644
--- a/.github/workflows/checks.yaml
+++ b/.github/workflows/checks.yaml
@@ -25,7 +25,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: 1.22.6
+          go-version: 1.23.0
       - name: Run golangci-lint
         uses: golangci/golangci-lint-action@v6
         with:
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 2898303f..0ac74ac2 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -28,7 +28,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: 1.22.6
+          go-version: 1.23.0
       - name: Build all binaries
         run: make build-all
   test:
@@ -43,7 +43,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: 1.22.6
+          go-version: 1.23.0
       - name: Run tests and generate coverage report
         run: make build/cover.out
       - name: Upload coverage report to Coveralls
diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index a02a51fe..867eb9e9 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -28,7 +28,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: 1.22.6
+          go-version: 1.23.0
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3
         with:
diff --git a/Dockerfile b/Dockerfile
index 9b564e85..4a2cd314 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.22.6-alpine3.20 AS builder
+FROM golang:1.23.0-alpine3.20 AS builder
 
 RUN apk add --no-cache --no-progress ca-certificates gcc git make musl-dev
 
diff --git a/go.mod b/go.mod
index 7a1e29f3..070bbcd4 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/sapcc/tenso
 
-go 1.22
+go 1.23
 
 require (
 	github.com/dlmiddlecote/sqlstats v1.0.2