diff --git a/.github/workflows/ci-rust.yml b/.github/workflows/ci-rust.yml
index 4979391..1063e30 100644
--- a/.github/workflows/ci-rust.yml
+++ b/.github/workflows/ci-rust.yml
@@ -33,7 +33,7 @@ jobs:
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
         with:
-          toolchain: '1.98'
+          toolchain: '1.99'
           components: rustfmt,clippy
       - name: Cache cargo registry + target
         uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
diff --git a/.github/workflows/cli-release.yml b/.github/workflows/cli-release.yml
index bf79c52..56d6e72 100644
--- a/.github/workflows/cli-release.yml
+++ b/.github/workflows/cli-release.yml
@@ -64,7 +64,7 @@ jobs:
               build-essential pkg-config libdbus-1-dev
       - uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
         with:
-          toolchain: '1.98'
+          toolchain: '1.99'
           targets: ${{ matrix.target }}
       - uses: taiki-e/upload-rust-binary-action@f0d45ae91ee7b8ee928de7a9d04d893a08bcbec6 # v1
         with:
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index 1c25275..5337f56 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -49,7 +49,9 @@ jobs:
         with:
           cluster_name: ferrvault-e2e
           # Keep the node image pinned so a kind release doesn't break us.
-          node_image: kindest/node:v1.32.2
+          node_image: kindest/node:v1.37.0
+          version: v0.33.0
+          kubectl_version: v1.37.0
 
       - name: Install Helm
         if: steps.gate.outputs.has_go == 'true'
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 3b98bb9..1d1d608 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -44,8 +44,8 @@ jobs:
           echo "Stamping chart with version $V"
           sed -i -E "s/^version: .*/version: \"$V\"/" charts/ferrvault-operator/Chart.yaml
           sed -i -E "s/^appVersion: .*/appVersion: \"$V\"/" charts/ferrvault-operator/Chart.yaml
-      - uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4
-      - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
+      - uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
       - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
         with:
           registry: ghcr.io