diff --git a/.github/workflows/dast-smoke.yml b/.github/workflows/dast-smoke.yml
index 5d8676cea7..e1b5c757e5 100644
--- a/.github/workflows/dast-smoke.yml
+++ b/.github/workflows/dast-smoke.yml
@@ -10,7 +10,10 @@ jobs:
     # ADVISORY while this new gate matures (repo convention: advisory -> blocking).
     # Flip to blocking (remove continue-on-error) once it's proven stable across a few PRs.
     continue-on-error: true
-    timeout-minutes: 12
+    # Build CLI bundle alone varies 6-11min on GitHub-hosted runners (3 consecutive
+    # timeouts observed on 2026-07-14 with the old 12min cap killing schemathesis
+    # mid-run) — 25min leaves real headroom for the actual DAST steps.
+    timeout-minutes: 25
     env:
       JWT_SECRET: ci-build-secret-with-sufficient-length-for-validation
       API_KEY_SECRET: ci-api-key-secret-with-sufficient-length-aaaa
diff --git a/changelog.d/maintenance/dast-smoke-timeout.md b/changelog.d/maintenance/dast-smoke-timeout.md
new file mode 100644
index 0000000000..b8c9880570
--- /dev/null
+++ b/changelog.d/maintenance/dast-smoke-timeout.md
@@ -0,0 +1 @@
+- **CI**: raise the dast-smoke job timeout 12→25min — the CLI bundle build alone varies 6-11min on GitHub-hosted runners, so the old cap killed Schemathesis mid-run (3 consecutive false-negative timeouts on 2026-07-14)