diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f7363f33bf..f222624cf2 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -10,7 +10,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     container:
-      image: golang:1.20
+      image: golang:1.21
     env:
       TEST_RESULTS: "/tmp/test-results"
     steps:
@@ -95,7 +95,7 @@ jobs:
     needs: integration-test-providers
     runs-on: ubuntu-latest
     container:
-      image: golang:1.20
+      image: golang:1.21
       env:
         TEST_RESULTS: "/tmp/test-results"
         GOTESTSUM_FORMAT: testname
@@ -199,7 +199,7 @@ jobs:
     if: github.ref != 'refs/heads/master' && github.ref != 'refs/heads/main'
     runs-on: ubuntu-latest
     container:
-      image: golang:1.20
+      image: golang:1.21
     needs:
     - integration-test-providers
     - integrtests-diff1
diff --git a/.github/workflows/draft_release.yml b/.github/workflows/draft_release.yml
index cd443ce406..77845f4f2e 100644
--- a/.github/workflows/draft_release.yml
+++ b/.github/workflows/draft_release.yml
@@ -42,7 +42,7 @@ jobs:
     - name: Set up Go
       uses: actions/setup-go@v4
       with:
-        go-version: ^1.20
+        go-version: ^1.21
 
 # For some reason goreleaser isn't correctly setting the version
 # string used by "dnscontrol version".  Therefore, we're forcing the
diff --git a/.github/workflows/release.yml.DISABLED b/.github/workflows/release.yml.DISABLED
index 8c81178be3..bb14282e33 100644
--- a/.github/workflows/release.yml.DISABLED
+++ b/.github/workflows/release.yml.DISABLED
@@ -23,7 +23,7 @@ jobs:
     - name: Set up Go
       uses: actions/setup-go@v4
       with:
-        go-version: ^1.20
+        go-version: ^1.21
 
     - name: Build binaries
       run: go run build/build.go