diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 9fd9f8f..0f3e829 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -14,7 +14,7 @@ env:
 
 jobs:
   detect-noop:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     outputs:
       noop: ${{ steps.noop.outputs.should_skip }}
     steps:
@@ -27,18 +27,13 @@ jobs:
           do_not_skip: '["workflow_dispatch", "schedule", "push"]'
 
   publish-artifacts:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs: detect-noop
     if: needs.detect-noop.outputs.noop != 'true'
 
     steps:
-      - name: Setup QEMU
-        uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3
-        with:
-          platforms: all
-
       - name: Setup Docker Buildx
-        uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3
+        uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3
         with:
           version: ${{ env.DOCKER_BUILDX_VERSION }}
           install: true
@@ -59,7 +54,7 @@ jobs:
           BUILD_ARGS: "--load"
 
       - name: Publish Artifacts to GitHub
-        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
+        uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4
         with:
           name: output
           path: _output/**
diff --git a/.github/workflows/tag.yml b/.github/workflows/tag.yml
index 8e4f3e6..4c9f1ea 100644
--- a/.github/workflows/tag.yml
+++ b/.github/workflows/tag.yml
@@ -12,7 +12,7 @@ on:
 
 jobs:
   create-tag:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Checkout
diff --git a/.github/workflows/yamllint.yaml b/.github/workflows/yamllint.yaml
index 2f8ffa5..acbb91b 100644
--- a/.github/workflows/yamllint.yaml
+++ b/.github/workflows/yamllint.yaml
@@ -7,7 +7,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: yamllint
-        uses: reviewdog/action-yamllint@508148c0d959b166798f9792d1b29dddcac37348 # v1.16.0
+        uses: reviewdog/action-yamllint@1dca3ad811867be18fbe293a9818d715a6c2cd46 # v1.20.0
         with:
           reporter: github-pr-review
           filter_mode: nofilter
diff --git a/Makefile b/Makefile
index 5597e56..4780ee0 100644
--- a/Makefile
+++ b/Makefile
@@ -117,7 +117,7 @@ PLATFORMS ?= linux_amd64
 
 # Tool Versions
 # ------------------
-UP_VERSION = v0.35.0
+UP_VERSION = v0.36.2
 UP_CHANNEL = stable
 CROSSPLANE_CLI_VERSION = v1.18.0
 CROSSPLANE_VERSION = v1.18.0-up.1
@@ -134,7 +134,7 @@ KIND_CLUSTER_NAME ?= uptest-$(PROJECT_NAME)
 # XPKG Configuration
 # ------------------
 XPKG_DIR = $(shell pwd)
-XPKG_IGNORE = .github/workflows/*.yaml,.github/workflows/*.yml,examples/*.yaml,.work/uptest-datasource.yaml,.cache/render/*
+XPKG_IGNORE ?= .github/workflows/*.yaml,.github/workflows/*.yml,examples/*.yaml,.work/uptest-datasource.yaml,.cache/render/*
 XPKG_REG_ORGS ?= xpkg.upbound.io/upbound
 # NOTE: Skip promoting on xpkg.upbound.io as channel tags are inferred
 XPKG_REG_ORGS_NO_PROMOTE ?= xpkg.upbound.io/upbound