diff --git a/.github/workflows/boulder-ci.yml b/.github/workflows/boulder-ci.yml
index 7189d1d3fd0..f56ef66c0db 100644
--- a/.github/workflows/boulder-ci.yml
+++ b/.github/workflows/boulder-ci.yml
@@ -36,7 +36,6 @@ jobs:
       matrix:
         # Add additional docker image tags here and all tests will be run with the additional image.
         BOULDER_TOOLS_TAG:
-          - go1.24.6_2025-08-06
           - go1.25.0_2025-08-15
         # Tests command definitions. Use the entire "docker compose" command you want to run.
         tests:
@@ -123,7 +122,7 @@ jobs:
       # When set to true, GitHub cancels all in-progress jobs if any matrix job fails. Default: true
       fail-fast: false
       matrix:
-        go-version: [ '1.24.1' ]
+        go-version: [ '1.25.0' ]
 
     steps:
       # Checks out your repository under $GITHUB_WORKSPACE, so your job can access it
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ecfd8d1c5c9..de8bcaa0629 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,7 +15,6 @@ jobs:
       fail-fast: false
       matrix:
         GO_VERSION:
-          - "1.24.6"
           - "1.25.0"
     runs-on: ubuntu-24.04
     permissions:
diff --git a/.github/workflows/try-release.yml b/.github/workflows/try-release.yml
index a29e676e765..dfd6bd6498f 100644
--- a/.github/workflows/try-release.yml
+++ b/.github/workflows/try-release.yml
@@ -19,7 +19,6 @@ jobs:
       fail-fast: false
       matrix:
         GO_VERSION:
-          - "1.24.6"
           - "1.25.0"
     runs-on: ubuntu-24.04
     steps:
diff --git a/docker-compose.yml b/docker-compose.yml
index 4c8f817e885..2e2ff274661 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -8,7 +8,7 @@ services:
       context: test/boulder-tools/
       # Should match one of the GO_CI_VERSIONS in test/boulder-tools/tag_and_upload.sh.
       args:
-        GO_VERSION: 1.24.6
+        GO_VERSION: 1.25.0
     environment:
       # To solve HTTP-01 and TLS-ALPN-01 challenges, change the IP in FAKE_DNS
       # to the IP address where your ACME client's solver is listening. This is
diff --git a/go.mod b/go.mod
index f5bcc4dfca2..98d2fd94ebb 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/letsencrypt/boulder
 
-go 1.24.0
+go 1.25.0
 
 require (
 	github.com/aws/aws-sdk-go-v2 v1.36.5
diff --git a/test/boulder-tools/tag_and_upload.sh b/test/boulder-tools/tag_and_upload.sh
index 762513009c2..4af99ba75b0 100755
--- a/test/boulder-tools/tag_and_upload.sh
+++ b/test/boulder-tools/tag_and_upload.sh
@@ -12,7 +12,7 @@ DOCKER_REPO="letsencrypt/boulder-tools"
 # .github/workflows/release.yml,
 # .github/workflows/try-release.yml if appropriate,
 # and .github/workflows/boulder-ci.yml with the new container tag.
-GO_CI_VERSIONS=( "1.24.6" "1.25.0" )
+GO_CI_VERSIONS=( "1.25.0" )
 
 echo "Please login to allow push to DockerHub"
 docker login
diff --git a/tools/container-build.sh b/tools/container-build.sh
index 2b17282c0e1..735332b6a67 100755
--- a/tools/container-build.sh
+++ b/tools/container-build.sh
@@ -34,7 +34,7 @@ docker buildx build \
     .
 
 docker run boulder tar -C /opt/boulder -cpz . > "./boulder-${VERSION}-${COMMIT_ID}.${ARCH}.tar.gz" .
-# Produces e.g. boulder-1.24.5.1754519595-591c0545.x86_64.deb
+# Produces e.g. boulder-1.25.0.1754519595-591c0545.x86_64.deb
 docker run -v .:/boulderrepo \
   -e "COMMIT_ID=$(git rev-parse --short=8 HEAD)" \
   -e "VERSION=${VERSION}" \