diff --git a/.github/workflows/cora-review.yml b/.github/workflows/cora-review.yml
index 425dd28..039ba0b 100644
--- a/.github/workflows/cora-review.yml
+++ b/.github/workflows/cora-review.yml
@@ -18,7 +18,7 @@ jobs:
   cora-review:
     name: Cora Review
     runs-on: ubuntu-latest
-    timeout-minutes: 10
+    timeout-minutes: 30
     steps:
       # SECURITY: this job checks out untrusted PR code while holding
       # CORA_API_KEY (pull_request_target). A PR-supplied .cora.yaml could set
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6285032..f8754eb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Fixed
+
+- The `Cora Review` job no longer gets cancelled on larger pull requests: its time limit is 30 minutes (the review action allows up to three LLM attempts of 10 minutes each).
+
 ## [0.19.0] - 2026-10-16
 
 ### Added