diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3a14cc5a..d6c5c96b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,7 +19,7 @@ jobs:
           java-version: 21
       - uses: subosito/flutter-action@v2
         with:
-          flutter-version: 3.44.1
+          flutter-version-file: pubspec.yaml
           cache: true
       - run: flutter doctor -v
       - run: flutter pub get
@@ -53,7 +53,7 @@ jobs:
           xcode-version: latest-stable
       - uses: subosito/flutter-action@v2
         with:
-          flutter-version: 3.44.1
+          flutter-version-file: pubspec.yaml
           cache: true
       - run: flutter pub get
       - run: flutter build ios --release --no-codesign
diff --git a/.github/workflows/gh-release.yml b/.github/workflows/gh-release.yml
index c668613e..a0d23fd7 100644
--- a/.github/workflows/gh-release.yml
+++ b/.github/workflows/gh-release.yml
@@ -32,7 +32,7 @@ jobs:
       - name: Set up Flutter
         uses: subosito/flutter-action@v2
         with:
-          flutter-version: 3.44.1
+          flutter-version-file: pubspec.yaml
           cache: true
       
       # Decode and create the upload-keystore.jks file, used for signing the app.
diff --git a/.github/workflows/pr-check.yml b/.github/workflows/pr-check.yml
index 8ea53ae2..1c3e9897 100644
--- a/.github/workflows/pr-check.yml
+++ b/.github/workflows/pr-check.yml
@@ -16,7 +16,7 @@ jobs:
           java-version: 21
       - uses: subosito/flutter-action@v2
         with:
-          flutter-version: 3.44.1
+          flutter-version-file: pubspec.yaml
           cache: true
       - run: flutter doctor -v
       - run: flutter pub get
diff --git a/.github/workflows/release-dryrun.yml b/.github/workflows/release-dryrun.yml
index 2c97dd62..b3c31b44 100644
--- a/.github/workflows/release-dryrun.yml
+++ b/.github/workflows/release-dryrun.yml
@@ -53,7 +53,7 @@ jobs:
       - name: Set up Flutter
         uses: subosito/flutter-action@v2
         with:
-          flutter-version: 3.44.1
+          flutter-version-file: pubspec.yaml
           cache: true
 
       # Decode and create the upload-keystore.jks file, used for signing the app.
@@ -105,7 +105,7 @@ jobs:
       - name: Set up Flutter
         uses: subosito/flutter-action@v2
         with:
-          flutter-version: 3.44.1
+          flutter-version-file: pubspec.yaml
           cache: true
 
       # Setup the iOS project with environment variables without signing (building and signing will happen in fastlane).
diff --git a/.github/workflows/store-release.yml b/.github/workflows/store-release.yml
index 353deb9b..db4fe7ef 100644
--- a/.github/workflows/store-release.yml
+++ b/.github/workflows/store-release.yml
@@ -49,7 +49,7 @@ jobs:
       - name: Set up Flutter
         uses: subosito/flutter-action@v2
         with:
-          flutter-version: 3.44.1
+          flutter-version-file: pubspec.yaml
           cache: true
 
       # Decode and create the upload-keystore.jks file, used for signing the app.
@@ -101,7 +101,7 @@ jobs:
       - name: Set up Flutter
         uses: subosito/flutter-action@v2
         with:
-          flutter-version: 3.44.1
+          flutter-version-file: pubspec.yaml
           cache: true
 
       # Setup the iOS project with environment variables without signing (building and signing will happen in fastlane).
diff --git a/pubspec.lock b/pubspec.lock
index 4f4b25b0..bd05ccbf 100644
--- a/pubspec.lock
+++ b/pubspec.lock
@@ -1530,4 +1530,4 @@ packages:
     version: "3.1.3"
 sdks:
   dart: ">=3.12.0 <4.0.0"
-  flutter: ">=3.44.0"
+  flutter: "3.44.2"
diff --git a/pubspec.yaml b/pubspec.yaml
index 962a8bf4..e05eaf23 100644
--- a/pubspec.yaml
+++ b/pubspec.yaml
@@ -21,6 +21,9 @@ version: 5.1.0+69
 
 environment:
   sdk: ^3.9.0
+  # Exact Flutter pin, enforced by `flutter pub get` locally and read by CI via
+  # `flutter-version-file: pubspec.yaml`. Single source of truth: bump here.
+  flutter: 3.44.2
 
 # Dependencies specify other packages that your package needs in order to work.
 # To automatically upgrade your package dependencies to the latest versions