diff --git a/dockerfiles/code-coverage-uploader/Dockerfile b/dockerfiles/code-coverage-uploader/Dockerfile
index 15e4e3593..b80ad8182 100644
--- a/dockerfiles/code-coverage-uploader/Dockerfile
+++ b/dockerfiles/code-coverage-uploader/Dockerfile
@@ -9,6 +9,6 @@ RUN apt-get update && apt-get install -y curl && rm -rf /var/lib/apt/lists/*
 RUN curl -sfLo /tmp/codecov https://uploader.codecov.io/latest/linux/codecov
 RUN chmod +x /tmp/codecov
 
-FROM golang:1.23.6
+FROM golang:1.24.0
 RUN apt-get update -y && apt-get dist-upgrade -y
 COPY --from=builder /tmp/codecov /usr/local/bin/codecov
diff --git a/dockerfiles/gh-cli/Dockerfile b/dockerfiles/gh-cli/Dockerfile
index 5545048ad..660143059 100644
--- a/dockerfiles/gh-cli/Dockerfile
+++ b/dockerfiles/gh-cli/Dockerfile
@@ -11,5 +11,5 @@ RUN curl \
     https://github.com/cli/cli/releases/download/v2.40.0/gh_2.40.0_linux_amd64.tar.gz \
     && tar -C /tmp --strip-components=1 -xzvf /tmp/gh.tar.gz
 
-FROM golang:1.23.6
+FROM golang:1.24.0
 COPY --from=builder /tmp/bin/gh /usr/local/bin/gh
diff --git a/dockerfiles/integration-test-runner-beta/Dockerfile b/dockerfiles/integration-test-runner-beta/Dockerfile
index ffefc17b9..6329a0429 100644
--- a/dockerfiles/integration-test-runner-beta/Dockerfile
+++ b/dockerfiles/integration-test-runner-beta/Dockerfile
@@ -36,7 +36,7 @@ RUN google-chrome --version
 
 # Install Go. The download URL that can be used below for any version of Go can be found on https://go.dev/dl/
 ENV PATH /usr/local/go/bin:$PATH
-RUN curl -fsSL https://go.dev/dl/go1.23.6.linux-amd64.tar.gz -o /tmp/go.tar.gz && \
+RUN curl -fsSL https://go.dev/dl/go1.24.0.linux-amd64.tar.gz -o /tmp/go.tar.gz && \
     tar -C /usr/local -xzf /tmp/go.tar.gz && \
     rm /tmp/go.tar.gz && \
     go version
diff --git a/dockerfiles/integration-test-runner/Dockerfile b/dockerfiles/integration-test-runner/Dockerfile
index c644a86cc..44d5b2684 100644
--- a/dockerfiles/integration-test-runner/Dockerfile
+++ b/dockerfiles/integration-test-runner/Dockerfile
@@ -36,7 +36,7 @@ RUN google-chrome --version
 
 # Install Go. The download URL that can be used below for any version of Go can be found on https://go.dev/dl/
 ENV PATH /usr/local/go/bin:$PATH
-RUN curl -fsSL https://go.dev/dl/go1.23.6.linux-amd64.tar.gz -o /tmp/go.tar.gz && \
+RUN curl -fsSL https://go.dev/dl/go1.24.0.linux-amd64.tar.gz -o /tmp/go.tar.gz && \
     tar -C /usr/local -xzf /tmp/go.tar.gz && \
     rm /tmp/go.tar.gz && \
     go version
diff --git a/pipelines/dockerfile-builders/pipeline.yml b/pipelines/dockerfile-builders/pipeline.yml
index ac1dad0b5..bb14d7841 100644
--- a/pipelines/dockerfile-builders/pipeline.yml
+++ b/pipelines/dockerfile-builders/pipeline.yml
@@ -38,7 +38,7 @@ meta:
   # These version numbers should be updated periodically.
   codegen-versions: &codegen-versions
     # Choose which version of Golang to use in the codegen container images.
-    BUILD_ARG_GO_VERSION: '1.23.6'
+    BUILD_ARG_GO_VERSION: '1.24.0'
     # Choose which version of sigs.k8s.io/controller-tools/cmd/controller-gen to install
     # in the codegen container images.
     BUILD_ARG_CONTROLLER_GEN_VERSION: 0.17.1
diff --git a/pipelines/pull-requests/pipeline.yml b/pipelines/pull-requests/pipeline.yml
index ca043711e..dcbb99fcc 100644
--- a/pipelines/pull-requests/pipeline.yml
+++ b/pipelines/pull-requests/pipeline.yml
@@ -569,7 +569,7 @@ jobs:
             type: registry-image
             source:
               repository: golang
-              tag: '1.23.6'
+              tag: '1.24.0'
           inputs:
             - name: pinniped-pr
           outputs:
diff --git a/pipelines/shared-helpers/test-binaries-image/Dockerfile b/pipelines/shared-helpers/test-binaries-image/Dockerfile
index c28e438b6..989318f29 100644
--- a/pipelines/shared-helpers/test-binaries-image/Dockerfile
+++ b/pipelines/shared-helpers/test-binaries-image/Dockerfile
@@ -8,7 +8,7 @@
 # test binaries built by this dockerfile are run in a container built by dockerfiles/integration-test-runner/Dockerfile
 # which uses google/cloud-sdk as the base image. Mismatching debian versions causes the pinniped-integration-test
 # built below to error upon execution complaining that the expected version of GLIBC is not found.
-FROM golang:1.23.6-bullseye as build-env
+FROM golang:1.24.0-bullseye as build-env
 WORKDIR /work
 COPY . .
 ARG GOPROXY
diff --git a/pipelines/shared-helpers/test-binaries-image/Dockerfile_fips b/pipelines/shared-helpers/test-binaries-image/Dockerfile_fips
index a348cb1b7..47c668d03 100644
--- a/pipelines/shared-helpers/test-binaries-image/Dockerfile_fips
+++ b/pipelines/shared-helpers/test-binaries-image/Dockerfile_fips
@@ -10,7 +10,7 @@
 # test binaries built by this dockerfile are run in a container built by dockerfiles/integration-test-runner/Dockerfile
 # which uses google/cloud-sdk as the base image. Mismatching debian versions causes the pinniped-integration-test
 # built below to error upon execution complaining that the expected version of GLIBC is not found.
-FROM golang:1.23.6-bullseye as build-env
+FROM golang:1.24.0-bullseye as build-env
 WORKDIR /work
 COPY . .
 ARG GOPROXY
diff --git a/pipelines/shared-tasks/build-cli-binaries/task.yml b/pipelines/shared-tasks/build-cli-binaries/task.yml
index 36b93aa56..ccd073ed1 100644
--- a/pipelines/shared-tasks/build-cli-binaries/task.yml
+++ b/pipelines/shared-tasks/build-cli-binaries/task.yml
@@ -7,7 +7,7 @@ image_resource:
   type: registry-image
   source:
     repository: golang
-    tag: '1.23.6'
+    tag: '1.24.0'
 inputs:
   - name: pinniped
   - name: pinniped-ci
diff --git a/pipelines/shared-tasks/confirm-built-with-fips/task.yml b/pipelines/shared-tasks/confirm-built-with-fips/task.yml
index 3d9ed8d83..d75f756fa 100644
--- a/pipelines/shared-tasks/confirm-built-with-fips/task.yml
+++ b/pipelines/shared-tasks/confirm-built-with-fips/task.yml
@@ -10,6 +10,6 @@ image_resource:
   type: registry-image
   source:
     repository: golang
-    tag: '1.23.6'
+    tag: '1.24.0'
 run:
   path: pinniped-ci/pipelines/shared-tasks/confirm-built-with-fips/task.sh
diff --git a/pipelines/shared-tasks/confirm-version/task.yml b/pipelines/shared-tasks/confirm-version/task.yml
index dfc70bd4a..42cd8ed3c 100644
--- a/pipelines/shared-tasks/confirm-version/task.yml
+++ b/pipelines/shared-tasks/confirm-version/task.yml
@@ -10,7 +10,7 @@ image_resource:
   type: registry-image
   source:
     repository: golang
-    tag: '1.23.6'
+    tag: '1.24.0'
 run:
   # Confirm that the correct git sha was baked into the executables and that they log the version as their
   # first line of output. Do this by directly running the server binary from the rootfs of the built image.
diff --git a/pipelines/shared-tasks/run-go-vuln-scan/task.yml b/pipelines/shared-tasks/run-go-vuln-scan/task.yml
index 030dfe07a..c8e537d6b 100644
--- a/pipelines/shared-tasks/run-go-vuln-scan/task.yml
+++ b/pipelines/shared-tasks/run-go-vuln-scan/task.yml
@@ -7,7 +7,7 @@ image_resource:
   type: registry-image
   source:
     repository: golang
-    tag: '1.23.6'
+    tag: '1.24.0'
 inputs:
   - name: pinniped
   - name: pinniped-ci
diff --git a/pipelines/shared-tasks/run-unit-tests/task.yml b/pipelines/shared-tasks/run-unit-tests/task.yml
index 0528b586b..add44d6a3 100644
--- a/pipelines/shared-tasks/run-unit-tests/task.yml
+++ b/pipelines/shared-tasks/run-unit-tests/task.yml
@@ -7,7 +7,7 @@ image_resource:
   type: registry-image
   source:
     repository: golang
-    tag: '1.23.6'
+    tag: '1.24.0'
 inputs:
   - name: pinniped
   - name: pinniped-ci
diff --git a/pipelines/shared-tasks/run-verify-go-generate/task.yml b/pipelines/shared-tasks/run-verify-go-generate/task.yml
index 7eb6168b9..79a3f1f95 100644
--- a/pipelines/shared-tasks/run-verify-go-generate/task.yml
+++ b/pipelines/shared-tasks/run-verify-go-generate/task.yml
@@ -7,7 +7,7 @@ image_resource:
   type: registry-image
   source:
     repository: golang
-    tag: '1.23.6'
+    tag: '1.24.0'
 inputs:
   - name: pinniped
   - name: pinniped-ci
diff --git a/pipelines/shared-tasks/run-verify-go-mod-tidy/task.yml b/pipelines/shared-tasks/run-verify-go-mod-tidy/task.yml
index 35cb60ea5..84f1460db 100644
--- a/pipelines/shared-tasks/run-verify-go-mod-tidy/task.yml
+++ b/pipelines/shared-tasks/run-verify-go-mod-tidy/task.yml
@@ -7,7 +7,7 @@ image_resource:
   type: registry-image
   source:
     repository: golang
-    tag: '1.23.6'
+    tag: '1.24.0'
 inputs:
   - name: pinniped
   - name: pinniped-ci
diff --git a/pipelines/shared-tasks/run-verify-lint/task.yml b/pipelines/shared-tasks/run-verify-lint/task.yml
index e9e5842c3..c2eb008f9 100644
--- a/pipelines/shared-tasks/run-verify-lint/task.yml
+++ b/pipelines/shared-tasks/run-verify-lint/task.yml
@@ -7,7 +7,7 @@ image_resource:
   type: registry-image
   source:
     repository: golang
-    tag: '1.23.6'
+    tag: '1.24.0'
 inputs:
   - name: pinniped
   - name: pinniped-ci
diff --git a/pipelines/shared-tasks/update-version-and-cli-docs/task.yml b/pipelines/shared-tasks/update-version-and-cli-docs/task.yml
index 931e497bb..892bf9664 100644
--- a/pipelines/shared-tasks/update-version-and-cli-docs/task.yml
+++ b/pipelines/shared-tasks/update-version-and-cli-docs/task.yml
@@ -7,7 +7,7 @@ image_resource:
   type: registry-image
   source:
     repository: golang
-    tag: '1.23.6'
+    tag: '1.24.0'
 inputs:
   - name: pinniped-ci
   - name: github-final-release