diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 2d31d19c..469a6330 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -20,7 +20,7 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  GO_VERSION: 1.23
+  GO_VERSION: 1.25
 
 defaults:
   run:
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index c035b3a8..2c5cc010 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -11,7 +11,7 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  GO_VERSION: 1.23
+  GO_VERSION: 1.25
   UV_PUBLISH_TOKEN: ${{ secrets.UV_PUBLISH_TOKEN }}
 
 permissions:
@@ -22,6 +22,7 @@ permissions:
 jobs:
   release:
     name: Release
+    if: github.repository == 'containers/kubernetes-mcp-server'
     runs-on: macos-latest
     steps:
       - name: Checkout
@@ -50,6 +51,7 @@ jobs:
           make npm-publish
   python:
     name: Release Python
+    if: github.repository == 'containers/kubernetes-mcp-server'
     # Python logic requires the tag/release version to be available from GitHub
     needs: release
     runs-on: ubuntu-latest
diff --git a/Makefile b/Makefile
index 04ff1ac0..06953058 100644
--- a/Makefile
+++ b/Makefile
@@ -16,7 +16,7 @@ LD_FLAGS = -s -w \
 COMMON_BUILD_ARGS = -ldflags "$(LD_FLAGS)"
 
 GOLANGCI_LINT = $(shell pwd)/_output/tools/bin/golangci-lint
-GOLANGCI_LINT_VERSION ?= v2.5.0
+GOLANGCI_LINT_VERSION ?= v2.6.1
 
 # NPM version should not append the -dirty flag
 NPM_VERSION ?= $(shell echo $(shell git describe --tags --always) | sed 's/^v//')