diff --git a/.github/workflows/consuming.yml b/.github/workflows/consuming.yml
index dc5f3c180..0d84c0db2 100644
--- a/.github/workflows/consuming.yml
+++ b/.github/workflows/consuming.yml
@@ -21,7 +21,8 @@ jobs:
         project: ['admiral', 'lighthouse', 'subctl', 'submariner', 'submariner-operator']
         deploytool: ['operator', 'helm']
         cabledriver: ['libreswan']
-        k8s_version: ['1.25']
+        # Run most tests against the latest K8s version
+        k8s_version: ['1.28']
         exclude:
           # Admiral E2E doesn't respect deploy-tool params, as it uses clusters without Submariner
           - project: admiral
@@ -35,11 +36,8 @@ jobs:
             cabledriver: wireguard
           # Test multiple K8s versions only in submariner-operator, balancing coverage and jobs
           - project: submariner-operator
-            k8s_version: '1.22'
-          - project: submariner-operator
-            k8s_version: '1.23'
-          - project: submariner-operator
-            k8s_version: '1.24'
+            # Bottom of supported K8s version range
+            k8s_version: '1.26'
     steps:
       - name: Check out the ${{ matrix.project }} repository
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
diff --git a/Makefile.inc b/Makefile.inc
index 8cb9b8f7e..9db4f156f 100644
--- a/Makefile.inc
+++ b/Makefile.inc
@@ -12,7 +12,7 @@ TIMEOUT ?= 5m
 export AIR_GAPPED DEBUG_PRINT DUAL_STACK GLOBALNET LOAD_BALANCER PARALLEL PLUGIN PRELOAD_IMAGES PROVIDER SETTINGS TEST_ARGS TIMEOUT
 
 # Specific to `clusters`
-K8S_VERSION ?= 1.25
+K8S_VERSION ?= 1.28
 METALLB_VERSION ?= 0.13.5
 OLM_VERSION ?= v0.18.3
 export K8S_VERSION METALLB_VERSION OLM OLM_VERSION PROMETHEUS
diff --git a/package/Dockerfile.shipyard-linting b/package/Dockerfile.shipyard-linting
index b93ecca53..7d995b809 100644
--- a/package/Dockerfile.shipyard-linting
+++ b/package/Dockerfile.shipyard-linting
@@ -29,7 +29,7 @@ ENV MARKDOWNLINT_VERSION=0.33.0 \
 RUN apk add --no-cache bash findutils git grep make nodejs py3-six shellcheck upx yamllint yq && \
     apk add --no-cache --virtual installers npm py3-pip && \
     npm install -g markdownlint-cli@${MARKDOWNLINT_VERSION} && \
-    pip install gitlint==${GITLINT_VERSION} && \
+    pip install --break-system-packages gitlint==${GITLINT_VERSION} && \
     find /usr/bin/ -type f -executable -newercc /proc -size +1M  \( -execdir upx {} \; -o -true \) && \
     find /usr/lib/ -name __pycache__ -type d -exec rm -rf {} + && \
     apk del installers