diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c9d51a229e..0142da09f7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -260,7 +260,7 @@ jobs:
       # Validate the committed manifests and lockfile before any release
       # projection is allowed to rewrite workspace package entries.
       - name: Verify committed Cargo metadata
-        run: cargo metadata --locked --no-deps
+        run: cargo metadata --locked --no-deps --format-version 1
 
       # rust-cache prunes the workspace target directory before saving it, so
       # native libraries stored under target need an independent cache lifecycle.
@@ -504,7 +504,7 @@ jobs:
 
       - name: Verify committed release metadata
         if: needs.build-impact.outputs.frontend_required != 'false'
-        run: cargo metadata --locked --no-deps
+        run: cargo metadata --locked --no-deps --format-version 1
 
       - name: Verify Installer i18n projection
         if: needs.build-impact.outputs.frontend_required != 'false'
@@ -597,4 +597,4 @@ jobs:
 
       - name: Verify projected release metadata
         if: needs.build-impact.outputs.frontend_required != 'false'
-        run: cargo metadata --locked --no-deps
+        run: cargo metadata --locked --no-deps --format-version 1
diff --git a/scripts/check-github-config.test.mjs b/scripts/check-github-config.test.mjs
index b2d9bddae6..826f5a2c81 100644
--- a/scripts/check-github-config.test.mjs
+++ b/scripts/check-github-config.test.mjs
@@ -323,7 +323,7 @@ test('keeps Rust CI independent, restore-only on PRs, and target-focused', () =>
   const verifyMetadata = rustJob.steps.find(
     (step) => step.name === 'Verify committed Cargo metadata',
   );
-  assert.equal(verifyMetadata?.run, 'cargo metadata --locked --no-deps');
+  assert.equal(verifyMetadata?.run, 'cargo metadata --locked --no-deps --format-version 1');
   assert.ok(
     rustJob.steps.indexOf(verifyMetadata) < rustJob.steps.indexOf(checkCompilation),
     'CI must validate the committed Cargo.lock before the workspace check',
@@ -407,7 +407,7 @@ test('gates fast checks and PR packaging behind one fail-closed build decision',
       `${stepName} must run for code changes and skip documentation-only changes`,
     );
   }
-  const releaseMetadata = 'cargo metadata --locked --no-deps';
+  const releaseMetadata = 'cargo metadata --locked --no-deps --format-version 1';
   assert.equal(
     frontendJob.steps.find((step) => step.name === 'Verify committed release metadata')?.run,
     releaseMetadata,