diff --git a/.github/workflows/build-test.yaml b/.github/workflows/build-test.yaml
index e9748aa35f..39657922c9 100644
--- a/.github/workflows/build-test.yaml
+++ b/.github/workflows/build-test.yaml
@@ -11,7 +11,7 @@ on:  # yamllint disable-line rule:truthy
     types:
       - "checks_requested"
 env:
-  GO_VERSION: "~1.21.3"
+  GO_VERSION: "~1.22.0"
   DOCKERHUB_PUBLIC_ACCESS_TOKEN: "dckr_pat_8AEETZWxu8f7FvJUk9NrpyX_ZEQ"
   DOCKERHUB_PUBLIC_USER: "spicedbgithubactions"
 jobs:
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index e42356c6d9..89d9ec537e 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -11,7 +11,7 @@ on: # yamllint disable-line rule:truthy
     types:
       - "checks_requested"
 env:
-  GO_VERSION: "~1.21.3"
+  GO_VERSION: "~1.22.0"
 jobs:
   go-lint:
     name: "Lint Go"
diff --git a/.github/workflows/nightly.yaml b/.github/workflows/nightly.yaml
index 6586038767..bc3fdd80c5 100644
--- a/.github/workflows/nightly.yaml
+++ b/.github/workflows/nightly.yaml
@@ -8,7 +8,7 @@ permissions:
   contents: "write"
   packages: "write"
 env:
-  GO_VERSION: "~1.21.3"
+  GO_VERSION: "~1.22.0"
 jobs:
   goreleaser:
     runs-on: "buildjet-4vcpu-ubuntu-2204"
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 3890f3eb83..a234a79dba 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -8,7 +8,7 @@ permissions:
   contents: "write"
   packages: "write"
 env:
-  GO_VERSION: "~1.21.3"
+  GO_VERSION: "~1.22.0"
 jobs:
   goreleaser:
     runs-on: "buildjet-4vcpu-ubuntu-2204"
diff --git a/.github/workflows/wasm.yaml b/.github/workflows/wasm.yaml
index 611813babf..4935e61d2b 100644
--- a/.github/workflows/wasm.yaml
+++ b/.github/workflows/wasm.yaml
@@ -6,7 +6,7 @@ on: # yamllint disable-line rule:truthy
 permissions:
   contents: "write"
 env:
-  GO_VERSION: "~1.21.3"
+  GO_VERSION: "~1.22.0"
 jobs:
   build:
     name: "Build WASM"
diff --git a/Dockerfile b/Dockerfile
index 5209dace76..3c4e0b18f3 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,10 +1,10 @@
-FROM golang:1.21.6-alpine3.18 AS spicedb-builder
+FROM golang:1.22.0-alpine3.18 AS spicedb-builder
 WORKDIR /go/src/app
 RUN apk update && apk add --no-cache git
 COPY . .
 RUN --mount=type=cache,target=/root/.cache/go-build --mount=type=cache,target=/go/pkg/mod CGO_ENABLED=0 go build -v ./cmd/...
 
-FROM golang:1.21.6-alpine3.18 AS health-probe-builder
+FROM golang:1.22.0-alpine3.18 AS health-probe-builder
 WORKDIR /go/src/app
 RUN apk update && apk add --no-cache git
 RUN git clone https://github.com/grpc-ecosystem/grpc-health-probe.git
diff --git a/Dockerfile.release b/Dockerfile.release
index 40cd1d9722..0ef73186ff 100644
--- a/Dockerfile.release
+++ b/Dockerfile.release
@@ -1,7 +1,7 @@
 # vim: syntax=dockerfile
 ARG BASE=cgr.dev/chainguard/static:latest
 
-FROM golang:1.21.6-alpine3.18 AS health-probe-builder
+FROM golang:1.22.0-alpine3.18 AS health-probe-builder
 WORKDIR /go/src/app
 RUN apk update && apk add --no-cache git
 RUN git clone https://github.com/grpc-ecosystem/grpc-health-probe.git