diff --git a/Directory.Packages.props b/Directory.Packages.props
index 3ee8fcb..bf81a54 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -20,7 +20,8 @@
     <ItemGroup Label="Roslyn">
         <PackageVersion Include="Microsoft.CodeAnalysis.Analyzers" Version="$(RoslynAnalyzersVersion)"/>
         <PackageVersion Include="Microsoft.CodeAnalysis.CSharp" Version="$(RoslynVersion)"/>
-        <PackageVersion Include="Microsoft.CodeAnalysis.CSharp.Workspaces" Version="$(RoslynVersion)"/>
+        <!-- CSharp.Workspaces NOT centrally defined: central PackageVersion + transitive pinning
+             leaks Workspaces into analyzer projects causing RS1038. VersionOverride in consumers. -->
     </ItemGroup>
 
     <!-- Roslyn.Utilities -->
diff --git a/src/ANcpLua.Analyzers.AotReflection/ANcpLua.Analyzers.AotReflection.csproj b/src/ANcpLua.Analyzers.AotReflection/ANcpLua.Analyzers.AotReflection.csproj
index 5b029a0..f748871 100644
--- a/src/ANcpLua.Analyzers.AotReflection/ANcpLua.Analyzers.AotReflection.csproj
+++ b/src/ANcpLua.Analyzers.AotReflection/ANcpLua.Analyzers.AotReflection.csproj
@@ -43,6 +43,8 @@
             <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
         </PackageReference>
         <PackageReference Include="Microsoft.CodeAnalysis.CSharp" PrivateAssets="all"/>
+        <!-- Block Workspaces from leaking via ANcpLua.Roslyn.Utilities transitive dep (RS1038) -->
+        <PackageReference Include="Microsoft.CodeAnalysis.Workspaces.Common" VersionOverride="$(RoslynVersion)" ExcludeAssets="all" PrivateAssets="all"/>
     </ItemGroup>
 
     <ItemGroup>
diff --git a/src/ANcpLua.Analyzers.CodeFixes/ANcpLua.Analyzers.CodeFixes.csproj b/src/ANcpLua.Analyzers.CodeFixes/ANcpLua.Analyzers.CodeFixes.csproj
index b4ca57e..999f6c7 100644
--- a/src/ANcpLua.Analyzers.CodeFixes/ANcpLua.Analyzers.CodeFixes.csproj
+++ b/src/ANcpLua.Analyzers.CodeFixes/ANcpLua.Analyzers.CodeFixes.csproj
@@ -36,7 +36,7 @@
     </ItemGroup>
 
     <ItemGroup>
-        <PackageReference Include="Microsoft.CodeAnalysis.CSharp.Workspaces" PrivateAssets="all"/>
+        <PackageReference Include="Microsoft.CodeAnalysis.CSharp.Workspaces" VersionOverride="$(RoslynVersion)" PrivateAssets="all"/>
     </ItemGroup>
 
     <ItemGroup>
diff --git a/src/ANcpLua.Analyzers/ANcpLua.Analyzers.csproj b/src/ANcpLua.Analyzers/ANcpLua.Analyzers.csproj
index 24209a0..09c0907 100644
--- a/src/ANcpLua.Analyzers/ANcpLua.Analyzers.csproj
+++ b/src/ANcpLua.Analyzers/ANcpLua.Analyzers.csproj
@@ -50,6 +50,8 @@
             <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
         </PackageReference>
         <PackageReference Include="Microsoft.CodeAnalysis.CSharp" PrivateAssets="all"/>
+        <!-- Block Workspaces from leaking via ANcpLua.Roslyn.Utilities transitive dep (RS1038) -->
+        <PackageReference Include="Microsoft.CodeAnalysis.Workspaces.Common" VersionOverride="$(RoslynVersion)" ExcludeAssets="all" PrivateAssets="all"/>
     </ItemGroup>
 
     <ItemGroup>
diff --git a/tests/ANcpLua.Analyzers.Tests/ANcpLua.Analyzers.Tests.csproj b/tests/ANcpLua.Analyzers.Tests/ANcpLua.Analyzers.Tests.csproj
index a8ed170..cea081b 100644
--- a/tests/ANcpLua.Analyzers.Tests/ANcpLua.Analyzers.Tests.csproj
+++ b/tests/ANcpLua.Analyzers.Tests/ANcpLua.Analyzers.Tests.csproj
@@ -12,7 +12,7 @@
     <ItemGroup>
         <!-- AwesomeAssertions and xunit.v3.mtp-v2 are auto-injected by SDK for IsTestProject -->
         <PackageReference Include="ANcpLua.Roslyn.Utilities.Testing"/>
-        <PackageReference Include="Microsoft.CodeAnalysis.CSharp.Workspaces"/>
+        <PackageReference Include="Microsoft.CodeAnalysis.CSharp.Workspaces" VersionOverride="$(RoslynVersion)"/>
         <PackageReference Remove="Meziantou.Xunit.v3.ParallelTestFramework"/>
     </ItemGroup>