diff --git a/.github/workflows/build-android.yml b/.github/workflows/build-android.yml
index bd6513d60..730062b89 100644
--- a/.github/workflows/build-android.yml
+++ b/.github/workflows/build-android.yml
@@ -164,7 +164,15 @@ jobs:
 
       # ---- Secrets ---------------------------------------------------------
       - name: Generate per-module secrets.g.dart files (all empty defaults)
-        run: dart run tool/generate_new_secrets.dart
+        run: |
+          # tool/generate_new_secrets.dart imports app deps (encrypt/convert/intl),
+          # so the app's packages must be resolved first. The configure step runs
+          # `flutter pub get` inside pubspec_gen.sh WITHOUT `set -e`, so any hiccup
+          # there fails silently and surfaces here as "Couldn't resolve the package".
+          # Resolve explicitly (and loudly) before running the tool.
+          set -e
+          flutter pub get
+          dart run tool/generate_new_secrets.dart
 
       - name: Inject Trocador + WalletConnect + MoonPay secrets into lib/.secrets.g.dart
         env:
diff --git a/.github/workflows/build-linux.yml b/.github/workflows/build-linux.yml
index 0dcdf8220..00c8063d0 100644
--- a/.github/workflows/build-linux.yml
+++ b/.github/workflows/build-linux.yml
@@ -124,7 +124,15 @@ jobs:
       # model_generator.sh is already trimmed to our 8 enabled chains.
       # Use `async` flag for parallel build_runner across modules.
       - name: Generate per-module secrets.g.dart files (all empty defaults)
-        run: dart run tool/generate_new_secrets.dart
+        run: |
+          # tool/generate_new_secrets.dart imports app deps (encrypt/convert/intl),
+          # so the app's packages must be resolved first. pubspec_gen.sh runs
+          # `flutter pub get` WITHOUT `set -e`, so any hiccup fails silently and
+          # surfaces here as "Couldn't resolve the package". Resolve explicitly
+          # (and loudly) before running the tool.
+          set -e
+          flutter pub get
+          dart run tool/generate_new_secrets.dart
 
       - name: Inject Trocador affiliate secrets into lib/.secrets.g.dart
         env: