diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 5b040e5326..56e477085a 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -10,3 +10,8 @@ updates:
       - "release-note-none"
       - "ok-to-test"
     open-pull-requests-limit: 10
+    groups:
+      actions:
+        update-types:
+          - "minor"
+          - "patch"
diff --git a/.github/workflows/docker.yaml b/.github/workflows/docker.yaml
index 42c251c1cd..9bd63ce8f4 100644
--- a/.github/workflows/docker.yaml
+++ b/.github/workflows/docker.yaml
@@ -28,6 +28,18 @@ jobs:
       - name: Check out code into the Go module directory
         uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
 
+      - name: Get go version
+        id: golangversion
+        run: |
+          echo "go_version=$(cat .go-version)" >> "$GITHUB_OUTPUT"
+
+      - name: Set up Go
+        id: go
+        uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
+        with:
+          go-version: ${{ steps.golangversion.outputs.go_version }}
+          check-latest: true
+
       - name: Install kind
         run: sudo make install INSTALL_DIR=/usr/local/bin
 
diff --git a/.github/workflows/nerdctl.yaml b/.github/workflows/nerdctl.yaml
index 71ed890134..e6ed967ebf 100644
--- a/.github/workflows/nerdctl.yaml
+++ b/.github/workflows/nerdctl.yaml
@@ -34,6 +34,18 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Get go version
+        id: golangversion
+        run: |
+          echo "go_version=$(cat .go-version)" >> "$GITHUB_OUTPUT"
+
+      - name: Set up Go
+        id: go
+        uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
+        with:
+          go-version: ${{ steps.golangversion.outputs.go_version }}
+          check-latest: true
+
       - name: Install kind
         run: sudo make install INSTALL_DIR=/usr/local/bin
 
diff --git a/.github/workflows/podman.yml b/.github/workflows/podman.yml
index d8066ce50a..43c20f69cb 100644
--- a/.github/workflows/podman.yml
+++ b/.github/workflows/podman.yml
@@ -34,6 +34,18 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Get go version
+        id: golangversion
+        run: |
+          echo "go_version=$(cat .go-version)" >> "$GITHUB_OUTPUT"
+
+      - name: Set up Go
+        id: go
+        uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
+        with:
+          go-version: ${{ steps.golangversion.outputs.go_version }}
+          check-latest: true
+
       - name: Install kind
         run: sudo make install INSTALL_DIR=/usr/local/bin
 
diff --git a/.github/workflows/vm.yaml b/.github/workflows/vm.yaml
index 450d1d5b15..f450c1ae4b 100644
--- a/.github/workflows/vm.yaml
+++ b/.github/workflows/vm.yaml
@@ -31,6 +31,18 @@ jobs:
       - name: Check out code
         uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
 
+      - name: Get go version
+        id: golangversion
+        run: |
+          echo "go_version=$(cat .go-version)" >> "$GITHUB_OUTPUT"
+
+      - name: Set up Go
+        id: go
+        uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
+        with:
+          go-version: ${{ steps.golangversion.outputs.go_version }}
+          check-latest: true
+
       # https://github.com/containerd/containerd/blob/420503072e58f27a7192ddea4e6e41dced911cb9/.github/workflows/ci.yml#L569-L581
       - name: Set up vagrant
         run: |
diff --git a/.go-version b/.go-version
index c262b1f0df..6245beecd3 100644
--- a/.go-version
+++ b/.go-version
@@ -1 +1 @@
-1.21.6
+1.22.1