diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9af8c37..d7d2917 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,7 +17,11 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [macos-latest, ubuntu-latest]
+        # Pin macOS to macos-14 (Sonoma): the rolling `macos-latest` image
+        # intermittently ships a broken compiler-rt path ("ld: library
+        # 'clang_rt.osx' not found"), which fails the Rust link step on an
+        # otherwise-green commit. macos-14 has a stable Xcode/clang toolchain.
+        os: [macos-14, ubuntu-latest]
     steps:
       - uses: actions/checkout@v4
 
@@ -61,13 +65,13 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - os: macos-latest
+          - os: macos-14
             target: aarch64-apple-darwin
             cargo_flags: ""
           # Intel Mac builds against a system ONNX Runtime via ort-dynamic
           # (ort-sys has no x86_64-apple-darwin prebuilts). Compile-only here;
           # runtime linking is a user concern documented in INSTALL-INTEL-MAC.md.
-          - os: macos-latest
+          - os: macos-14
             target: x86_64-apple-darwin
             cargo_flags: "--no-default-features --features ort-dynamic,vector-search"
           - os: ubuntu-latest
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d789b12..3741d29 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -39,11 +39,11 @@ jobs:
           # consumers must `brew install onnxruntime` before running — see
           # INSTALL-INTEL-MAC.md bundled in the tarball.
           - target: x86_64-apple-darwin
-            os: macos-latest
+            os: macos-14
             archive: tar.gz
             cargo_flags: "--no-default-features --features ort-dynamic,vector-search"
           - target: aarch64-apple-darwin
-            os: macos-latest
+            os: macos-14
             archive: tar.gz
             cargo_flags: ""