diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ac24ea69..82f1b984 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -81,7 +81,7 @@ jobs:
           - { mode: cxx23, configuration: Release, compiler: "clang-libstdcxx:22" }
           - { mode: cxx26, configuration: Debug,   compiler: "gcc:16" }
           - { mode: cxx26, configuration: Release, compiler: "gcc:16" }
-    container: libfn.azurecr.io/ci-build-${{ matrix.compiler }}-sha-08b1133
+    container: libfn.azurecr.io/ci-build-${{ matrix.compiler }}-sha-95f599d
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index eb12640c..ef067191 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -35,7 +35,7 @@ permissions:
 jobs:
   generate_docs:
     runs-on: ${{ github.repository == 'libfn/functional' && 'warp-ubuntu-latest-arm64-2x' || 'ubuntu-latest' }}
-    container: libfn.azurecr.io/ci-docs:sha-08b1133
+    container: libfn.azurecr.io/ci-docs:sha-95f599d
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
diff --git a/.github/workflows/package-test-bazel.yml b/.github/workflows/package-test-bazel.yml
index 9a74de17..270e20ff 100644
--- a/.github/workflows/package-test-bazel.yml
+++ b/.github/workflows/package-test-bazel.yml
@@ -36,7 +36,7 @@ jobs:
         image:
           - ci-build-gcc-bazel:16
           - ci-build-clang-bazel:22
-    container: libfn.azurecr.io/${{ matrix.image }}-sha-08b1133
+    container: libfn.azurecr.io/${{ matrix.image }}-sha-95f599d
     defaults:
       run:
         working-directory: test_package
diff --git a/.github/workflows/package-test-conan.yml b/.github/workflows/package-test-conan.yml
index 132fdecf..d9b21c9f 100644
--- a/.github/workflows/package-test-conan.yml
+++ b/.github/workflows/package-test-conan.yml
@@ -25,7 +25,7 @@ jobs:
   test_conan_linux:
     # arm64: the amd64 warp fleet pulls images at 1-2 MB/s; the arm64 fleet serves them in seconds
     runs-on: ${{ github.repository == 'libfn/functional' && 'warp-ubuntu-latest-arm64-2x' || 'ubuntu-latest' }}
-    container: libfn.azurecr.io/ci-build-gcc:16-sha-08b1133
+    container: libfn.azurecr.io/ci-build-gcc:16-sha-95f599d
 
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index b825c2c6..8ad48886 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -12,7 +12,7 @@ on:
 jobs:
   checks:
     runs-on: ${{ github.repository == 'libfn/functional' && 'warp-ubuntu-latest-arm64-2x' || 'ubuntu-latest' }}
-    container: libfn.azurecr.io/ci-pre-commit:sha-08b1133
+    container: libfn.azurecr.io/ci-pre-commit:sha-95f599d
 
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
diff --git a/.github/workflows/sonarcloud-pr-scan.yml b/.github/workflows/sonarcloud-pr-scan.yml
index cda848d4..4f275059 100644
--- a/.github/workflows/sonarcloud-pr-scan.yml
+++ b/.github/workflows/sonarcloud-pr-scan.yml
@@ -37,7 +37,7 @@ jobs:
     # Runner and container must match sonarcloud.yml's: the compiler paths in the compile_commands.json
     # analysed below were recorded there, and must resolve to the same toolchain here.
     runs-on: ${{ github.repository == 'libfn/functional' && 'warp-ubuntu-latest-arm64-4x' || 'ubuntu-latest' }}
-    container: libfn.azurecr.io/ci-build-gcc:15-sha-08b1133
+    container: libfn.azurecr.io/ci-build-gcc:15-sha-95f599d
     env:
       SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
 
diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml
index 30d18a7b..0e27fdff 100644
--- a/.github/workflows/sonarcloud.yml
+++ b/.github/workflows/sonarcloud.yml
@@ -13,7 +13,7 @@ jobs:
     # Runner and container must match sonarcloud-pr-scan's: it analyses the compile_commands.json
     # written here, and the compiler paths recorded in it must resolve to the same toolchain there.
     runs-on: ${{ github.repository == 'libfn/functional' && 'warp-ubuntu-latest-arm64-4x' || 'ubuntu-latest' }}
-    container: libfn.azurecr.io/ci-build-gcc:15-sha-08b1133
+    container: libfn.azurecr.io/ci-build-gcc:15-sha-95f599d
     env:
       # Gates the inline scan below (a fork without a token no-ops); see also resolve-sonar-project.
       SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}