diff --git a/.github/workflows/pr-validation.yml b/.github/workflows/pr-validation.yml
index 4d70443..c45e66c 100644
--- a/.github/workflows/pr-validation.yml
+++ b/.github/workflows/pr-validation.yml
@@ -104,10 +104,12 @@ jobs:
           go mod download
           go test ./...
 
+      # Dependabot does not update this pin. It must read export data from the
+      # newest Go in the matrix; Go 1.27.2 emits V5, which needs v2.14.0+.
       - name: Run golangci-lint
         uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9.3.0
         with:
-          version: v2.13.2
+          version: v2.14.0
 
       - name: Wait for service emulators
         run: |