diff --git a/.github/workflows/build-signed.yml b/.github/workflows/build-signed.yml
index 7d139cb..659b603 100644
--- a/.github/workflows/build-signed.yml
+++ b/.github/workflows/build-signed.yml
@@ -6,10 +6,12 @@ jobs:
   build-signed:
     permissions:
       contents: write
-    runs-on: windows-2022
+    runs-on: windows-2025
     steps:
       - name: Checkout Repository
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Install Go
         uses: actions/setup-go@v5
       - name: Setup pnpm
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 839aca5..72058e1 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -35,7 +35,7 @@ jobs:
       fail-fast: false
       matrix:
         # maybe update to macOS 14 if this is ARM64-ready?
-        platform: [macos-13, ubuntu-22.04, windows-2022]
+        platform: [macos-13, ubuntu-22.04, windows-2025]
 
     runs-on: ${{ matrix.platform }}
     steps:
@@ -51,7 +51,7 @@ jobs:
           name: verifier-builds
           path: verifier/dist/
       - name: Apply +x to verifier
-        if: matrix.platform != 'windows-2022'
+        if: matrix.platform != 'windows-2025'
         run: chmod +x verifier/dist/*
       - name: Setup pnpm
         uses: pnpm/action-setup@v3
@@ -97,7 +97,7 @@ jobs:
           path: src-tauri/target/release/bundle/dmg/*.dmg
       - name: Upload the Windows packages
         uses: actions/upload-artifact@v4
-        if: matrix.platform == 'windows-2022'
+        if: matrix.platform == 'windows-2025'
         with:
           name: windows-packages
           path: src-tauri/target/release/*.exe
@@ -127,7 +127,7 @@ jobs:
           path: src-tauri/target/debug/bundle/dmg/*.dmg
       - name: Upload the Windows packages
         uses: actions/upload-artifact@v4
-        if: matrix.platform == 'windows-2022'
+        if: matrix.platform == 'windows-2025'
         with:
           name: windows-packages-debug
           path: src-tauri/target/debug/*.exe