diff --git a/.github/workflows/boulder-ci.yml b/.github/workflows/boulder-ci.yml
index a251fbc216d..ffe0f81ad6e 100644
--- a/.github/workflows/boulder-ci.yml
+++ b/.github/workflows/boulder-ci.yml
@@ -36,8 +36,8 @@ jobs:
       matrix:
         # Add additional docker image tags here and all tests will be run with the additional image.
         BOULDER_TOOLS_TAG:
-          - go1.23.3_2025-01-22
-          - go1.24rc2_2025-01-22
+          - go1.23.6_2025-02-11
+          - go1.24.0_2025-02-11
         # Tests command definitions. Use the entire "docker compose" command you want to run.
         tests:
           # Run ./test.sh --help for a description of each of the flags.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e63e3daca7f..faefab64ff0 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,8 +15,8 @@ jobs:
       fail-fast: false
       matrix:
         GO_VERSION:
-          - "1.23.3"
-          - "1.24rc2"
+          - "1.23.6"
+          - "1.24.0"
     runs-on: ubuntu-20.04
     permissions:
       contents: write
diff --git a/.github/workflows/try-release.yml b/.github/workflows/try-release.yml
index 6e33b03e3fb..3fa881c13b4 100644
--- a/.github/workflows/try-release.yml
+++ b/.github/workflows/try-release.yml
@@ -16,8 +16,8 @@ jobs:
       fail-fast: false
       matrix:
         GO_VERSION:
-          - "1.23.3"
-          - "1.24rc2"
+          - "1.23.6"
+          - "1.24.0"
     runs-on: ubuntu-20.04
     steps:
       - uses: actions/checkout@v4
diff --git a/docker-compose.yml b/docker-compose.yml
index 3eff98cda18..15d9e92710f 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -8,7 +8,7 @@ services:
       context: test/boulder-tools/
       # Should match one of the GO_CI_VERSIONS in test/boulder-tools/tag_and_upload.sh.
       args:
-        GO_VERSION: 1.23.3
+        GO_VERSION: 1.23.6
     environment:
       # To solve HTTP-01 and TLS-ALPN-01 challenges, change the IP in FAKE_DNS
       # to the IP address where your ACME client's solver is listening.
diff --git a/test/boulder-tools/tag_and_upload.sh b/test/boulder-tools/tag_and_upload.sh
index 935ec92656e..705326f2b7a 100755
--- a/test/boulder-tools/tag_and_upload.sh
+++ b/test/boulder-tools/tag_and_upload.sh
@@ -12,7 +12,7 @@ DOCKER_REPO="letsencrypt/boulder-tools"
 # .github/workflows/release.yml,
 # .github/workflows/try-release.yml if appropriate,
 # and .github/workflows/boulder-ci.yml with the new container tag.
-GO_CI_VERSIONS=( "1.23.3" "1.24rc2" )
+GO_CI_VERSIONS=( "1.23.6" "1.24.0" )
 
 echo "Please login to allow push to DockerHub"
 docker login