diff --git a/.config/mise.toml b/.config/mise.toml
index e92c3e7..4be9f83 100644
--- a/.config/mise.toml
+++ b/.config/mise.toml
@@ -19,7 +19,7 @@ java = 'corretto-11'
 "github:pulumi/pulumi" = "{{ env.PULUMI_VERSION_MISE }}"
 "github:pulumi/pulumictl" = '0.0.50'
 "github:pulumi/schema-tools" = "0.6.0"
-"go:github.com/pulumi/upgrade-provider" = "0.0.1"
+"go:github.com/pulumi/upgrade-provider" = "main"
 "aqua:gradle/gradle-distributions" = '7.6.6'
 golangci-lint = "1.64.8" # See note about about overrides if you need to customize this.
 "npm:yarn" = "1.22.22"
diff --git a/.github/actions/setup-tools/action.yml b/.github/actions/setup-tools/action.yml
index f428295..0cc2c25 100644
--- a/.github/actions/setup-tools/action.yml
+++ b/.github/actions/setup-tools/action.yml
@@ -18,7 +18,7 @@ runs:
       env:
         MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
       with:
-        version: 2026.2.15
+        version: 2026.3.7
         cache_save: ${{ inputs.cache }}
         github_token: ${{ inputs.github_token }}
 
diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
index 13ecf48..6c109c1 100644
--- a/.github/workflows/claude.yml
+++ b/.github/workflows/claude.yml
@@ -60,7 +60,7 @@ jobs:
         env:
           MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
         with:
-          version: 2026.2.15
+          version: 2026.3.7
           github_token: ${{ secrets.GITHUB_TOKEN }}
           # only saving the cache in the prerequisites job
           cache_save: false
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index fe22849..530949b 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -53,7 +53,7 @@ jobs:
       env:
         MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
       with:
-        version: 2026.2.15
+        version: 2026.3.7
         github_token: ${{ steps.app-auth.outputs.token }}
         cache_save: false # A different job handles caching our tools.
     - name: prepare workspace