diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 7a1ae3398..77b60565f 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -29,7 +29,7 @@ jobs:
       - name: Run golangci-lint
         uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9.2.0
         with:
-          version: v2.8.0
+          version: v2.10.1
           args: --timeout 5m -v
 
           #--exclude SA5011
diff --git a/Makefile b/Makefile
index 0f060d2ce..5880b7246 100644
--- a/Makefile
+++ b/Makefile
@@ -9,7 +9,7 @@ GOFLAGS=-mod=vendor
 REGISTRY ?= localhost
 UPLOADREGISTRY ?= quay.io/validatedpatterns
 GOLANGCI_IMG ?= docker.io/golangci/golangci-lint
-GOLANGCI_VERSION ?= 2.8.0
+GOLANGCI_VERSION ?= 2.10.1
 
 # CI uses a non-writable home dir, make sure .cache is writable
 ifeq ("${HOME}", "/")
diff --git a/internal/controller/pattern_controller.go b/internal/controller/pattern_controller.go
index 7a7d32fd7..b30b5302c 100644
--- a/internal/controller/pattern_controller.go
+++ b/internal/controller/pattern_controller.go
@@ -978,7 +978,7 @@ func (r *PatternReconciler) checkSpokeApplicationsGone(appOfApps bool) (bool, er
 	}
 
 	// Make the request
-	resp, err := httpClient.Do(req)
+	resp, err := httpClient.Do(req) //nolint:gosec // URL is constructed from a known internal service endpoint
 	if err != nil {
 		return false, fmt.Errorf("failed to make HTTP request to search service: %w", err)
 	}