diff --git a/.github/workflows/_checks.yml b/.github/workflows/_checks.yml
index 9dd6ea6..f531918 100644
--- a/.github/workflows/_checks.yml
+++ b/.github/workflows/_checks.yml
@@ -56,7 +56,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
         with:
-          python-version: "3.12"
+          python-version: "3.14"
       - run: pip install pyyaml
       - name: Skill frontmatter gate
         run: |
diff --git a/.github/workflows/publish-pypi.yml b/.github/workflows/publish-pypi.yml
index caa0feb..a71fe58 100644
--- a/.github/workflows/publish-pypi.yml
+++ b/.github/workflows/publish-pypi.yml
@@ -34,7 +34,7 @@ jobs:
       - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
       - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
-          python-version: "3.12"
+          python-version: "3.14"
       - name: Build sdist + wheel
         run: python -m pip install --upgrade build && python -m build
       - name: Validate metadata (twine check)
diff --git a/.github/workflows/registry-cleanroom.yml b/.github/workflows/registry-cleanroom.yml
index 43509e5..1982a10 100644
--- a/.github/workflows/registry-cleanroom.yml
+++ b/.github/workflows/registry-cleanroom.yml
@@ -91,7 +91,7 @@ jobs:
 
       - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
         with:
-          python-version: "3.12"
+          python-version: "3.14"
 
       - name: Run clean-room acceptance against the public registries
         id: cleanroom
diff --git a/.github/workflows/registry-parity.yml b/.github/workflows/registry-parity.yml
index 0ba5337..5075a82 100644
--- a/.github/workflows/registry-parity.yml
+++ b/.github/workflows/registry-parity.yml
@@ -30,7 +30,7 @@ jobs:
           node-version: "22"
       - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
-          python-version: "3.11"
+          python-version: "3.14"
       - name: Per-package declared vs npm-latest
         run: |
           set -uo pipefail