diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 6a8ef38a9..c768f8170 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -13,7 +13,7 @@ jobs:
   test-unit:
     runs-on: ubuntu-latest
     container:
-      image: golang:1.22.3-bookworm
+      image: golang:1.22.4-bookworm
     steps:
     - name: Checkout code
       uses: actions/checkout@v4
@@ -63,7 +63,7 @@ jobs:
   lint-go:
     runs-on: ubuntu-latest
     container:
-      image: golang:1.22.3-bookworm
+      image: golang:1.22.4-bookworm
     steps:
     - name: Checkout code
       uses: actions/checkout@v4
@@ -84,7 +84,7 @@ jobs:
   lint-charts:
     runs-on: ubuntu-latest
     container:
-      image: golang:1.22.3-bookworm
+      image: golang:1.22.4-bookworm
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
@@ -99,7 +99,7 @@ jobs:
   lint-proto:
     runs-on: ubuntu-latest
     container:
-      image: golang:1.22.3-bookworm
+      image: golang:1.22.4-bookworm
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
@@ -115,7 +115,7 @@ jobs:
   check-codegen:
     runs-on: ubuntu-latest
     container:
-      image: golang:1.22.3-bookworm
+      image: golang:1.22.4-bookworm
     steps:
     - name: Checkout code
       uses: actions/checkout@v4
@@ -183,7 +183,7 @@ jobs:
     needs: [test-unit, lint-go, lint-charts, lint-proto, lint-ui, check-codegen]
     runs-on: ubuntu-latest
     container:
-      image: golang:1.22.3-bookworm
+      image: golang:1.22.4-bookworm
     steps:
     - name: Checkout code
       uses: actions/checkout@v4
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 1d377a9eb..9a0f41ec0 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -30,10 +30,10 @@ jobs:
         fi
         echo "Repository is set to: $REPO"
         echo "repo=$REPO" >> $GITHUB_OUTPUT
-    - name: Setup Go >= 1.22.3
+    - name: Setup Go
       uses: actions/setup-go@v5
       with:
-        go-version: '1.22.3'
+        go-version: '1.22.4'
     - name: Set version for unstable builds
       id: unstable-version
       run: |
@@ -164,7 +164,7 @@ jobs:
     if: github.event_name == 'release'
     runs-on: ubuntu-latest
     container:
-      image: golang:1.22.3-bookworm
+      image: golang:1.22.4-bookworm
     strategy:
       matrix:
         os: [linux, darwin, windows]
@@ -232,7 +232,7 @@ jobs:
     if: github.event_name != 'release'
     runs-on: ubuntu-latest
     container:
-      image: golang:1.22.3-bookworm
+      image: golang:1.22.4-bookworm
     strategy:
       matrix:
         os: [linux, darwin, windows]
diff --git a/Dockerfile b/Dockerfile
index d2fb5340a..a62485926 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -18,7 +18,7 @@ RUN NODE_ENV='production' VERSION=${VERSION} pnpm run build
 ####################################################################################################
 # back-end-builder
 ####################################################################################################
-FROM --platform=$BUILDPLATFORM golang:1.22.3-bookworm as back-end-builder
+FROM --platform=$BUILDPLATFORM golang:1.22.4-bookworm as back-end-builder
 
 ARG TARGETOS
 ARG TARGETARCH
diff --git a/Dockerfile.dev b/Dockerfile.dev
index f6e5e5a11..7cfbeace9 100644
--- a/Dockerfile.dev
+++ b/Dockerfile.dev
@@ -1,4 +1,4 @@
-FROM golang:1.22.3-bookworm
+FROM golang:1.22.4-bookworm
 
 ARG TARGETARCH
 
diff --git a/go.mod b/go.mod
index 31d8c1a68..5f28be0fa 100644
--- a/go.mod
+++ b/go.mod
@@ -2,7 +2,7 @@ module github.com/akuity/kargo
 
 go 1.22.0
 
-toolchain go1.22.3
+toolchain go1.22.4
 
 require (
 	connectrpc.com/connect v1.16.2