diff --git a/Dockerfile b/Dockerfile
index b9b149a..58528b9 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -10,7 +10,8 @@ RUN go mod download
 COPY . .
 
 # Run all checks — build fails if branch is not green
-RUN go install github.com/golangci/golangci-lint/cmd/golangci-lint@v2.1.6
+# golangci-lint v2.8.0
+RUN CGO_ENABLED=0 go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@e2e40021c9007020676c93680a36e3ab06c6cd33
 RUN make check
 
 ARG VERSION=dev
diff --git a/cmd/chat-cli/api/client.go b/cmd/chat-cli/api/client.go
index 762b39e..d49730d 100644
--- a/cmd/chat-cli/api/client.go
+++ b/cmd/chat-cli/api/client.go
@@ -123,7 +123,7 @@ func (c *Client) PollMessages(
 
 	req.Header.Set("Authorization", "Bearer "+c.Token)
 
-	resp, err := client.Do(req) //nolint:gosec // URL from user config
+	resp, err := client.Do(req)
 	if err != nil {
 		return nil, err
 	}
@@ -269,7 +269,7 @@ func (c *Client) do(
 		req.Header.Set("Authorization", "Bearer "+c.Token)
 	}
 
-	resp, err := c.HTTPClient.Do(req) //nolint:gosec // URL from user config
+	resp, err := c.HTTPClient.Do(req)
 	if err != nil {
 		return nil, fmt.Errorf("http: %w", err)
 	}
diff --git a/internal/handlers/api.go b/internal/handlers/api.go
index 764a0fe..f7dba5c 100644
--- a/internal/handlers/api.go
+++ b/internal/handlers/api.go
@@ -224,7 +224,7 @@ func (s *Handlers) HandleChannelMembers() http.HandlerFunc {
 
 		var chID int64
 
-		err := s.params.Database.GetDB().QueryRowContext( //nolint:gosec // parameterized query
+		err := s.params.Database.GetDB().QueryRowContext(
 			r.Context(),
 			"SELECT id FROM channels WHERE name = ?",
 			name,
@@ -401,7 +401,7 @@ func (s *Handlers) sendChannelMsg(
 ) {
 	var chID int64
 
-	err := s.params.Database.GetDB().QueryRowContext( //nolint:gosec // parameterized query
+	err := s.params.Database.GetDB().QueryRowContext(
 		r.Context(),
 		"SELECT id FROM channels WHERE name = ?",
 		channel,
@@ -535,7 +535,7 @@ func (s *Handlers) handlePart(
 
 	var chID int64
 
-	err := s.params.Database.GetDB().QueryRowContext( //nolint:gosec // parameterized query
+	err := s.params.Database.GetDB().QueryRowContext(
 		r.Context(),
 		"SELECT id FROM channels WHERE name = ?",
 		channel,
@@ -717,7 +717,7 @@ func (s *Handlers) getChannelHistory(
 ) {
 	var chID int64
 
-	err := s.params.Database.GetDB().QueryRowContext( //nolint:gosec // parameterized query
+	err := s.params.Database.GetDB().QueryRowContext(
 		r.Context(),
 		"SELECT id FROM channels WHERE name = ?",
 		target,