diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml
index 136a976..b95b96d 100644
--- a/.github/workflows/golangci-lint.yml
+++ b/.github/workflows/golangci-lint.yml
@@ -1,6 +1,3 @@
-# This file was copied from the following URL and modified:
-# https://github.com/golangci/golangci-lint-action/blob/master/README.md#how-to-use
-
 name: golangci-lint
 on:
   push:
@@ -22,12 +19,8 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
         with:
-          go-version: 1.21.x
-          cache: false
+          go-version: 1.23.x
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v6
         with:
-          version: v1.54 # current version at time of commit
-          args: --timeout=10m
-          # Only show new issues in a PR but show all issues for pushes
           only-new-issues: ${{ github.event_name == 'pull_request' && 'true' || 'false' }}
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 303743b..af5743f 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -11,6 +11,8 @@ concurrency: ${{ github.ref }}
 jobs:
   create-draft-release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     outputs:
       RELEASE_ID: ${{ steps.create-release.outputs.result }}
     steps:
@@ -60,7 +62,7 @@ jobs:
           fetch-depth: '0'
       - uses: actions/setup-go@v5
         with:
-          go-version: 1.21.x
+          go-version: 1.23.x
       - name: Build binary
         run: GOOS=${{ matrix.os }} GOARCH=${{ matrix.arch }} make build
       - name: Upload release asset
@@ -157,6 +159,8 @@ jobs:
 
   finalize-release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     needs: [create-draft-release, build-binaries, build-images]
     steps:
       - uses: actions/github-script@v7
diff --git a/go.mod b/go.mod
index e5364c9..42c2ca8 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/blinklabs-io/tx-submit-api-mirror
 
-go 1.22.11
+go 1.23.6
 
 require (
 	github.com/blinklabs-io/cardano-models v0.4.0
diff --git a/internal/api/api.go b/internal/api/api.go
index 06c7cd8..19863e9 100644
--- a/internal/api/api.go
+++ b/internal/api/api.go
@@ -217,7 +217,10 @@ func handleSubmitTx(c *gin.Context) {
 	if cfg.Maestro.ApiKey != "" {
 		go func(cfg *config.Config, rawTx []byte) {
 			txHex := hex.EncodeToString(rawTx)
-			maestroClient := maestro.NewClient(cfg.Maestro.ApiKey, cfg.Maestro.Network)
+			maestroClient := maestro.NewClient(
+				cfg.Maestro.ApiKey,
+				cfg.Maestro.Network,
+			)
 			startTime := time.Now()
 			if cfg.Maestro.TurboTx {
 				_, err := maestroClient.TxManagerSubmitTurbo(txHex)