diff --git a/.github/workflows/checks.yaml b/.github/workflows/checks.yaml
index d1a6c606..e914fb18 100644
--- a/.github/workflows/checks.yaml
+++ b/.github/workflows/checks.yaml
@@ -25,7 +25,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: 1.22.3
+          go-version: 1.22.4
       - name: Dependency Licenses Review
         run: make check-dependency-licenses
       - name: Run govulncheck
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index d213c39f..d701267c 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -28,7 +28,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: 1.22.3
+          go-version: 1.22.4
       - name: Build all binaries
         run: make build-all
       - name: Run golangci-lint
@@ -47,6 +47,6 @@ jobs:
         uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: 1.22.3
+          go-version: 1.22.4
       - name: Run tests and generate coverage report
         run: make build/cover.out
diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 88de15ca..3ca13bc0 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -28,7 +28,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: 1.22.3
+          go-version: 1.22.4
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3
         with:
diff --git a/.github/workflows/goreleaser.yaml b/.github/workflows/goreleaser.yaml
index 51a1b423..a9630814 100644
--- a/.github/workflows/goreleaser.yaml
+++ b/.github/workflows/goreleaser.yaml
@@ -24,7 +24,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: 1.22.3
+          go-version: 1.22.4
       - name: Generate release info
         run: |
           go install github.com/sapcc/go-bits/tools/release-info@latest
diff --git a/Dockerfile b/Dockerfile
index b43a612b..8a85923f 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.22.3-alpine3.20 as builder
+FROM golang:1.22.4-alpine3.20 as builder
 
 RUN apk add --no-cache --no-progress ca-certificates gcc git make musl-dev