diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 45a32e47..2310ae80 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -37,6 +37,7 @@ jobs:
           filters: |
             rust:
               - 'apps/desktop/src-tauri/**'
+              - 'apps/desktop/rust-toolchain.toml'
             svelte:
               - 'apps/desktop/src/**'
               - 'apps/desktop/static/**'
diff --git a/apps/desktop/rust-toolchain.toml b/apps/desktop/rust-toolchain.toml
index 1347ad47..5a06e113 100644
--- a/apps/desktop/rust-toolchain.toml
+++ b/apps/desktop/rust-toolchain.toml
@@ -3,3 +3,9 @@
 # A compromised rustc release would land transparently otherwise. Bump
 # deliberately, with a few days between Rust's release and our pin update.
 channel = "1.95.0"
+# rustup installs only the minimal profile for a pinned channel by default
+# (rustc + cargo + rust-std). CI invokes `cargo fmt` and `cargo clippy`, both
+# of which need their respective components installed. Declare them here so
+# the runner picks them up automatically — without this, every CI Rust job
+# fails at the rustfmt step.
+components = ["rustfmt", "clippy"]