diff --git a/.github/workflows/golang.yaml b/.github/workflows/golang.yaml
index 4b37aae..fbe4128 100644
--- a/.github/workflows/golang.yaml
+++ b/.github/workflows/golang.yaml
@@ -51,7 +51,7 @@ jobs:
           # Keep in sync with tools.lock, so CI and `make lint` run the same
           # linter. Without this the action defaults to "latest".
           # renovate: datasource=github-releases depName=golangci/golangci-lint
-          version: v2.12.2
+          version: v2.14.0
 
   test:
     needs: lint
diff --git a/tools.lock b/tools.lock
index 6297617..cd6701b 100644
--- a/tools.lock
+++ b/tools.lock
@@ -1,5 +1,5 @@
 addlicense github.com/google/addlicense@v1.2.0
 controller-gen sigs.k8s.io/controller-tools/cmd/controller-gen@v0.19.0
-golangci-lint github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.12.2
+golangci-lint github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.14.0
 osv-scanner github.com/google/osv-scanner/v2/cmd/osv-scanner@v2.6.0
 setup-envtest sigs.k8s.io/controller-runtime/tools/setup-envtest@release-0.23