diff --git a/.github/renovate.json b/.github/renovate.json
index 8570f916..e642af1e 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -12,7 +12,7 @@
   ],
   "commitMessageAction": "Renovate: Update",
   "constraints": {
-    "go": "1.23"
+    "go": "1.24"
   },
   "dependencyDashboardOSVVulnerabilitySummary": "all",
   "osvVulnerabilityAlerts": true,
@@ -25,7 +25,7 @@
       "matchPackageNames": [
         "golang"
       ],
-      "allowedVersions": "1.23.x"
+      "allowedVersions": "1.24.x"
     },
     {
       "matchPackageNames": [
diff --git a/.github/workflows/checks.yaml b/.github/workflows/checks.yaml
index 8d70bcb7..2028b3a5 100644
--- a/.github/workflows/checks.yaml
+++ b/.github/workflows/checks.yaml
@@ -29,7 +29,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: 1.23.6
+          go-version: 1.24.0
       - name: Run golangci-lint
         uses: golangci/golangci-lint-action@v6
         with:
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 05e4cb9f..235632a7 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -32,7 +32,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: 1.23.6
+          go-version: 1.24.0
       - name: Build all binaries
         run: make build-all
   test:
@@ -47,7 +47,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: 1.23.6
+          go-version: 1.24.0
       - name: Run tests and generate coverage report
         run: |
           sudo /usr/share/postgresql-common/pgdg/apt.postgresql.org.sh -y
diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 5acab215..bf706747 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -32,7 +32,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: 1.23.6
+          go-version: 1.24.0
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3
         with:
diff --git a/Dockerfile b/Dockerfile
index d6c83e61..7f6a53dd 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.23.6-alpine3.21 AS builder
+FROM golang:1.24.0-alpine3.21 AS builder
 
 RUN apk add --no-cache --no-progress ca-certificates gcc git make musl-dev
 
diff --git a/go.mod b/go.mod
index 7f5bdf75..2116563e 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/sapcc/limes
 
-go 1.23
+go 1.24
 
 require (
 	github.com/databus23/goslo.policy v0.0.0-20210929125152-81bf2876dbdb
diff --git a/shell.nix b/shell.nix
index 5ad99d62..424347e5 100644
--- a/shell.nix
+++ b/shell.nix
@@ -9,7 +9,7 @@ mkShell {
   nativeBuildInputs = [
     addlicense
     go-licence-detector
-    go_1_23
+    go_1_24
     golangci-lint
     gotools # goimports
     postgresql_17