diff --git a/.github/workflows/rust-packages.yml b/.github/workflows/rust-packages.yml
index 5094f25..c25fec3 100644
--- a/.github/workflows/rust-packages.yml
+++ b/.github/workflows/rust-packages.yml
@@ -26,7 +26,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ubuntu-latest, macos-latest, windows-latest]
+        os: [ubuntu-latest, macos-14, windows-latest]
     runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6.0.3
diff --git a/CHANGELOG.md b/CHANGELOG.md
index d7b6d12..320eb7c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,10 @@
 # Changelog
 
+## v0.2.10 - 08/07/2026
+
+### Fixes
+- `rust-packages` — pin the `preflight` macOS runner to `macos-14`. `macos-latest` rolled to an Xcode whose clang runtime path breaks the compiler-rt link (`ld: library 'clang_rt.osx' not found`), flaking every consumer's macOS preflight. `macos-14` matches the runner the `dist-build` aarch64 leg already uses.
+
 ## v0.2.9 - 21/06/2026
 
 ### Fixes
diff --git a/package.json b/package.json
index 2a8c323..c2243b2 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@coroboros/ci",
-  "version": "0.2.9",
+  "version": "0.2.10",
   "private": true,
   "description": "Reusable GitHub Actions CI for the Coroboros stack.",
   "license": "SEE LICENSE IN LICENSE.md",