diff --git a/.github/workflows/command-dispatch.yml b/.github/workflows/command-dispatch.yml
index dce27e690..4f1087d6f 100644
--- a/.github/workflows/command-dispatch.yml
+++ b/.github/workflows/command-dispatch.yml
@@ -21,7 +21,7 @@ env:
   PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget
   PYPI_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
   PYPI_USERNAME: __token__
-  PYTHONVERSION: "3.11"
+  PYTHONVERSION: 3.11.8
   RANCHER_INSECURE: "true"
   RANCHER_URL: https://localhost
   SIGNING_KEY: ${{ secrets.JAVA_SIGNING_KEY }}
diff --git a/.github/workflows/license.yml b/.github/workflows/license.yml
index 3d8a84bcc..a47d64a9c 100644
--- a/.github/workflows/license.yml
+++ b/.github/workflows/license.yml
@@ -27,7 +27,7 @@ env:
   PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget
   PYPI_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
   PYPI_USERNAME: __token__
-  PYTHONVERSION: "3.11"
+  PYTHONVERSION: 3.11.8
   RANCHER_INSECURE: "true"
   RANCHER_URL: https://localhost
   SIGNING_KEY: ${{ secrets.JAVA_SIGNING_KEY }}
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index c2d2981b8..16f6c4d03 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -26,7 +26,7 @@ env:
   PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget
   PYPI_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
   PYPI_USERNAME: __token__
-  PYTHONVERSION: "3.11"
+  PYTHONVERSION: 3.11.8
   RANCHER_INSECURE: "true"
   RANCHER_URL: https://localhost
   SIGNING_KEY: ${{ secrets.JAVA_SIGNING_KEY }}
diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml
index d3c17313e..b204b2d00 100644
--- a/.github/workflows/master.yml
+++ b/.github/workflows/master.yml
@@ -21,7 +21,7 @@ env:
   PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget
   PYPI_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
   PYPI_USERNAME: __token__
-  PYTHONVERSION: "3.11"
+  PYTHONVERSION: 3.11.8
   RANCHER_INSECURE: "true"
   RANCHER_URL: https://localhost
   SIGNING_KEY: ${{ secrets.JAVA_SIGNING_KEY }}
diff --git a/.github/workflows/prerelease.yml b/.github/workflows/prerelease.yml
index d8ceb6bee..7fc639b2a 100644
--- a/.github/workflows/prerelease.yml
+++ b/.github/workflows/prerelease.yml
@@ -22,7 +22,7 @@ env:
   PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget
   PYPI_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
   PYPI_USERNAME: __token__
-  PYTHONVERSION: "3.11"
+  PYTHONVERSION: 3.11.8
   RANCHER_INSECURE: "true"
   RANCHER_URL: https://localhost
   SIGNING_KEY: ${{ secrets.JAVA_SIGNING_KEY }}
diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml
index 7f9af5a69..17fcb7020 100644
--- a/.github/workflows/pull-request.yml
+++ b/.github/workflows/pull-request.yml
@@ -21,7 +21,7 @@ env:
   PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget
   PYPI_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
   PYPI_USERNAME: __token__
-  PYTHONVERSION: "3.11"
+  PYTHONVERSION: 3.11.8
   RANCHER_INSECURE: "true"
   RANCHER_URL: https://localhost
   SIGNING_KEY: ${{ secrets.JAVA_SIGNING_KEY }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 487741d09..bc8a3b948 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -21,7 +21,7 @@ env:
   PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget
   PYPI_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
   PYPI_USERNAME: __token__
-  PYTHONVERSION: "3.11"
+  PYTHONVERSION: 3.11.8
   RANCHER_INSECURE: "true"
   RANCHER_URL: https://localhost
   SIGNING_KEY: ${{ secrets.JAVA_SIGNING_KEY }}
diff --git a/.github/workflows/resync-build.yml b/.github/workflows/resync-build.yml
index 2e655288b..21e368e6c 100644
--- a/.github/workflows/resync-build.yml
+++ b/.github/workflows/resync-build.yml
@@ -23,7 +23,7 @@ env:
   PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget
   PYPI_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
   PYPI_USERNAME: __token__
-  PYTHONVERSION: "3.11"
+  PYTHONVERSION: 3.11.8
   RANCHER_INSECURE: "true"
   RANCHER_URL: https://localhost
   SIGNING_KEY: ${{ secrets.JAVA_SIGNING_KEY }}
diff --git a/.github/workflows/run-acceptance-tests.yml b/.github/workflows/run-acceptance-tests.yml
index 791500cf0..fdc38a1ee 100644
--- a/.github/workflows/run-acceptance-tests.yml
+++ b/.github/workflows/run-acceptance-tests.yml
@@ -22,7 +22,7 @@ env:
   PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget
   PYPI_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
   PYPI_USERNAME: __token__
-  PYTHONVERSION: "3.11"
+  PYTHONVERSION: 3.11.8
   RANCHER_INSECURE: "true"
   RANCHER_URL: https://localhost
   SIGNING_KEY: ${{ secrets.JAVA_SIGNING_KEY }}
diff --git a/devbox.json b/devbox.json
index 6b9c10cd4..4e2ed2c38 100644
--- a/devbox.json
+++ b/devbox.json
@@ -4,7 +4,7 @@
     "pulumictl@latest",
     "go@1.21.",
     "nodejs@20.",
-    "python3@3.11",
+    "python3@3.11.8",
     "dotnet-sdk@6.0.",
     "gradle_7@7.6"
   ],