diff --git a/bazel/toolchains/ci_deps.bzl b/bazel/toolchains/ci_deps.bzl
index efb8eaac2..2852a801d 100644
--- a/bazel/toolchains/ci_deps.bzl
+++ b/bazel/toolchains/ci_deps.bzl
@@ -223,45 +223,45 @@ def _golangci_lint_deps():
         name = "com_github_golangci_golangci_lint_linux_amd64",
         build_file = "//bazel/toolchains:BUILD.golangci.bazel",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/50ebc01988429e07d29a556417aaf1ef4df441a7e88645617cf5db3033c0e37b",
-            "https://github.com/golangci/golangci-lint/releases/download/v2.0.0/golangci-lint-2.0.0-linux-amd64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/9bfc38d7869834443c03ef5f9977e78207cca386a89c2ad0ecd2bd85ccdabe29",
+            "https://github.com/golangci/golangci-lint/releases/download/v2.0.1/golangci-lint-2.0.1-linux-amd64.tar.gz",
         ],
-        strip_prefix = "golangci-lint-2.0.0-linux-amd64",
+        strip_prefix = "golangci-lint-2.0.1-linux-amd64",
         type = "tar.gz",
-        sha256 = "50ebc01988429e07d29a556417aaf1ef4df441a7e88645617cf5db3033c0e37b",
+        sha256 = "9bfc38d7869834443c03ef5f9977e78207cca386a89c2ad0ecd2bd85ccdabe29",
     )
     http_archive(
         name = "com_github_golangci_golangci_lint_linux_arm64",
         build_file = "//bazel/toolchains:BUILD.golangci.bazel",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/00cd307e8cb20001cf0655b5a723dd678eb2b578151afab798312cd4a5f5eae1",
-            "https://github.com/golangci/golangci-lint/releases/download/v2.0.0/golangci-lint-2.0.0-linux-arm64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/e5cee439b9d16eb2bf5ddc7e4e8b2d9465fb87c051fa307056b192a6f49b3796",
+            "https://github.com/golangci/golangci-lint/releases/download/v2.0.1/golangci-lint-2.0.1-linux-arm64.tar.gz",
         ],
-        strip_prefix = "golangci-lint-2.0.0-linux-arm64",
+        strip_prefix = "golangci-lint-2.0.1-linux-arm64",
         type = "tar.gz",
-        sha256 = "00cd307e8cb20001cf0655b5a723dd678eb2b578151afab798312cd4a5f5eae1",
+        sha256 = "e5cee439b9d16eb2bf5ddc7e4e8b2d9465fb87c051fa307056b192a6f49b3796",
     )
     http_archive(
         name = "com_github_golangci_golangci_lint_darwin_amd64",
         build_file = "//bazel/toolchains:BUILD.golangci.bazel",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/07f81ff3c7a5078a36ac90e49c0dc8629625aa53efbdb463517e5f5929113e76",
-            "https://github.com/golangci/golangci-lint/releases/download/v2.0.0/golangci-lint-2.0.0-darwin-amd64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/ab6cfa62b3e71f14e05fae450537ef94c68cc19d3f2153e59644b0671c386557",
+            "https://github.com/golangci/golangci-lint/releases/download/v2.0.1/golangci-lint-2.0.1-darwin-amd64.tar.gz",
         ],
-        strip_prefix = "golangci-lint-2.0.0-darwin-amd64",
+        strip_prefix = "golangci-lint-2.0.1-darwin-amd64",
         type = "tar.gz",
-        sha256 = "07f81ff3c7a5078a36ac90e49c0dc8629625aa53efbdb463517e5f5929113e76",
+        sha256 = "ab6cfa62b3e71f14e05fae450537ef94c68cc19d3f2153e59644b0671c386557",
     )
     http_archive(
         name = "com_github_golangci_golangci_lint_darwin_arm64",
         build_file = "//bazel/toolchains:BUILD.golangci.bazel",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/ee63f34045256370db6880500fe4f2904bb004e1a2591b09feb28642997d29d8",
-            "https://github.com/golangci/golangci-lint/releases/download/v2.0.0/golangci-lint-2.0.0-darwin-arm64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/a51f5f2f2b20ce481c33a6d34b94076d94389a835c646c77f356ea022d610c15",
+            "https://github.com/golangci/golangci-lint/releases/download/v2.0.1/golangci-lint-2.0.1-darwin-arm64.tar.gz",
         ],
-        strip_prefix = "golangci-lint-2.0.0-darwin-arm64",
+        strip_prefix = "golangci-lint-2.0.1-darwin-arm64",
         type = "tar.gz",
-        sha256 = "ee63f34045256370db6880500fe4f2904bb004e1a2591b09feb28642997d29d8",
+        sha256 = "a51f5f2f2b20ce481c33a6d34b94076d94389a835c646c77f356ea022d610c15",
     )
 
 def _buf_deps():