diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 26e140aa..d2116fe3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -27,7 +27,9 @@ jobs:
       - name: Run golangci-lint
         uses: golangci/golangci-lint-action@v6
         with:
-          version: latest
+          # Pin to v1.64.8 (last v1 release) to pair with the v1-format
+          # .golangci.yml. `latest` can drift to v2 and fail config parsing.
+          version: v1.64.8
           args: --timeout=5m
           skip-cache: true
 
diff --git a/.golangci.yml b/.golangci.yml
index ad16370b..05c3124b 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -2,6 +2,10 @@ run:
   timeout: 5m
   tests: true
   # Cache bust: 2025-08-15
+  # Pin lint target to Go 1.24 so the analyser (built against Go 1.24 in
+  # golangci-lint v1.64.x) does not bail out on go.mod's 1.26.1 directive.
+  # Remove once golangci-lint ships a Go 1.26 binary and we can migrate to v2.
+  go: "1.24"
 
 linters:
   enable: