diff --git a/.github/workflows/acceptance-205.yml b/.github/workflows/acceptance-205.yml
index c8e4875f..7b3aafdd 100644
--- a/.github/workflows/acceptance-205.yml
+++ b/.github/workflows/acceptance-205.yml
@@ -92,7 +92,7 @@ jobs:
           ref: ${{ inputs.ref }}
       - uses: astral-sh/setup-uv@v3
       - name: Setup soldr
-        uses: zackees/setup-soldr@v0
+        uses: zackees/setup-soldr@66c33b01e682c4dbe3869c2adffd9d55f16a7d67
         with:
           cache-key-suffix: acceptance-205-${{ matrix.test_bin }}
           cache: true
diff --git a/.github/workflows/bench-205.yml b/.github/workflows/bench-205.yml
index cca5b104..fb71ff81 100644
--- a/.github/workflows/bench-205.yml
+++ b/.github/workflows/bench-205.yml
@@ -45,7 +45,7 @@ jobs:
           ref: ${{ inputs.ref }}
       - uses: astral-sh/setup-uv@v3
       - name: Setup soldr
-        uses: zackees/setup-soldr@v0
+        uses: zackees/setup-soldr@66c33b01e682c4dbe3869c2adffd9d55f16a7d67
         with:
           cache-key-suffix: bench-205-${{ matrix.bench }}
           cache: true
@@ -88,7 +88,7 @@ jobs:
           ref: ${{ inputs.ref }}
       - uses: astral-sh/setup-uv@v3
       - name: Setup soldr
-        uses: zackees/setup-soldr@v0
+        uses: zackees/setup-soldr@66c33b01e682c4dbe3869c2adffd9d55f16a7d67
         with:
           cache-key-suffix: bench-205-fastled-examples
           cache: true
diff --git a/.github/workflows/benchmark-build-comparison.yml b/.github/workflows/benchmark-build-comparison.yml
index de6da152..cbe44ca2 100644
--- a/.github/workflows/benchmark-build-comparison.yml
+++ b/.github/workflows/benchmark-build-comparison.yml
@@ -41,7 +41,7 @@ jobs:
       - uses: astral-sh/setup-uv@v3
 
       - name: Setup soldr
-        uses: zackees/setup-soldr@v0
+        uses: zackees/setup-soldr@66c33b01e682c4dbe3869c2adffd9d55f16a7d67
         with:
           cache-key-suffix: benchmark-build-comparison-benchmark
           cache: true
diff --git a/.github/workflows/check-macos.yml b/.github/workflows/check-macos.yml
index b075466d..45c00883 100644
--- a/.github/workflows/check-macos.yml
+++ b/.github/workflows/check-macos.yml
@@ -36,7 +36,7 @@ jobs:
       - uses: actions/setup-python@v6
         with:
           python-version: "3.13"
-      - uses: zackees/setup-soldr@v0
+      - uses: zackees/setup-soldr@66c33b01e682c4dbe3869c2adffd9d55f16a7d67
         with:
           cache-key-suffix: check-macos-test
           cache: true
diff --git a/.github/workflows/check-ubuntu.yml b/.github/workflows/check-ubuntu.yml
index 0456e6e6..21fde32a 100644
--- a/.github/workflows/check-ubuntu.yml
+++ b/.github/workflows/check-ubuntu.yml
@@ -42,7 +42,7 @@ jobs:
       - uses: astral-sh/setup-uv@v3
       - name: Setup soldr
         id: setup-soldr
-        uses: zackees/setup-soldr@67ed4018aca013f8388050ac9bc264244f9b742c
+        uses: zackees/setup-soldr@66c33b01e682c4dbe3869c2adffd9d55f16a7d67
         with:
           # Own build-cache store (setup-soldr#237): with no suffix this job
           # shared one Cargo.lock-keyed entry with ~10 other workflows, and
@@ -108,7 +108,7 @@ jobs:
         with:
           python-version: "3.10"
       - name: Setup soldr
-        uses: zackees/setup-soldr@67ed4018aca013f8388050ac9bc264244f9b742c
+        uses: zackees/setup-soldr@66c33b01e682c4dbe3869c2adffd9d55f16a7d67
         with:
           cache-key-suffix: python-facades
           cache: true
diff --git a/.github/workflows/check-windows.yml b/.github/workflows/check-windows.yml
index ae3c53e7..7b303dcc 100644
--- a/.github/workflows/check-windows.yml
+++ b/.github/workflows/check-windows.yml
@@ -35,7 +35,7 @@ jobs:
           ref: ${{ inputs.ref }}
       - name: Setup soldr
         id: setup-soldr
-        uses: zackees/setup-soldr@67ed4018aca013f8388050ac9bc264244f9b742c
+        uses: zackees/setup-soldr@66c33b01e682c4dbe3869c2adffd9d55f16a7d67
         with:
           cache-key-suffix: check-windows-check
           cache: true
diff --git a/.github/workflows/ci-full.yml b/.github/workflows/ci-full.yml
index 3516db06..36761ded 100644
--- a/.github/workflows/ci-full.yml
+++ b/.github/workflows/ci-full.yml
@@ -128,7 +128,7 @@ jobs:
         with:
           ref: ${{ needs.verify.outputs.candidate_sha }}
           persist-credentials: false
-      - uses: zackees/setup-soldr@dfbe9627f6cb0226716b61625b99a58949162720
+      - uses: zackees/setup-soldr@66c33b01e682c4dbe3869c2adffd9d55f16a7d67
         with:
           cache-preset: foundation
           prebuild-deps-flags: ""
diff --git a/.github/workflows/ci-minimal.yml b/.github/workflows/ci-minimal.yml
index 01c5db6e..68c7c355 100644
--- a/.github/workflows/ci-minimal.yml
+++ b/.github/workflows/ci-minimal.yml
@@ -55,7 +55,7 @@ jobs:
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           persist-credentials: false
-      - uses: zackees/setup-soldr@dfbe9627f6cb0226716b61625b99a58949162720
+      - uses: zackees/setup-soldr@66c33b01e682c4dbe3869c2adffd9d55f16a7d67
         with:
           cache-preset: foundation
           prebuild-deps-flags: ""
diff --git a/.github/workflows/ci-test.yml b/.github/workflows/ci-test.yml
index ac3e73a6..09d9e95e 100644
--- a/.github/workflows/ci-test.yml
+++ b/.github/workflows/ci-test.yml
@@ -70,7 +70,7 @@ jobs:
         with:
           ref: ${{ needs.verify.outputs.candidate_sha }}
           persist-credentials: false
-      - uses: zackees/setup-soldr@dfbe9627f6cb0226716b61625b99a58949162720
+      - uses: zackees/setup-soldr@66c33b01e682c4dbe3869c2adffd9d55f16a7d67
         with:
           cache-preset: foundation
           prebuild-deps-flags: ""
diff --git a/.github/workflows/dylint.yml b/.github/workflows/dylint.yml
index b355f6b9..6b4f1de7 100644
--- a/.github/workflows/dylint.yml
+++ b/.github/workflows/dylint.yml
@@ -73,7 +73,7 @@ jobs:
           uv run --no-project python ci/check_fbuild_path_baseline.py --base FETCH_HEAD
       - name: Validate platform-boundary ledgers
         run: uv run --no-project python ci/enforce_platform_boundary.py --print-totals
-      - uses: zackees/setup-soldr@v0
+      - uses: zackees/setup-soldr@66c33b01e682c4dbe3869c2adffd9d55f16a7d67
         with:
           # ci-tests applies the prescribed bounded resource contract for the
           # workspace validation domain. Dylint deliberately remains on its
diff --git a/.github/workflows/esp32s3-size-parity.yml b/.github/workflows/esp32s3-size-parity.yml
index 5729df40..5138cdf4 100644
--- a/.github/workflows/esp32s3-size-parity.yml
+++ b/.github/workflows/esp32s3-size-parity.yml
@@ -35,7 +35,7 @@ jobs:
       - uses: astral-sh/setup-uv@v3
 
       - name: Setup soldr
-        uses: zackees/setup-soldr@v0
+        uses: zackees/setup-soldr@66c33b01e682c4dbe3869c2adffd9d55f16a7d67
         with:
           cache-key-suffix: esp32s3-size-parity-size-parity
           cache: true
diff --git a/.github/workflows/fmt.yml b/.github/workflows/fmt.yml
index bb1fc5c1..75112cbe 100644
--- a/.github/workflows/fmt.yml
+++ b/.github/workflows/fmt.yml
@@ -35,7 +35,7 @@ jobs:
           ref: ${{ inputs.ref }}
       - name: Setup soldr
         id: setup-soldr
-        uses: zackees/setup-soldr@v0
+        uses: zackees/setup-soldr@66c33b01e682c4dbe3869c2adffd9d55f16a7d67
         with:
           cache-key-suffix: fmt-fmt
           cache: true
diff --git a/.github/workflows/nightly-platforms.yml b/.github/workflows/nightly-platforms.yml
index ddec09b1..19a79b48 100644
--- a/.github/workflows/nightly-platforms.yml
+++ b/.github/workflows/nightly-platforms.yml
@@ -65,7 +65,7 @@ jobs:
         with:
           ref: ${{ github.sha }}
           persist-credentials: false
-      - uses: zackees/setup-soldr@dfbe9627f6cb0226716b61625b99a58949162720
+      - uses: zackees/setup-soldr@66c33b01e682c4dbe3869c2adffd9d55f16a7d67
         with:
           cache-preset: foundation
           prebuild-deps-flags: ""
diff --git a/.github/workflows/platform-boundary-research.yml b/.github/workflows/platform-boundary-research.yml
index 7fc89a3f..c796189d 100644
--- a/.github/workflows/platform-boundary-research.yml
+++ b/.github/workflows/platform-boundary-research.yml
@@ -33,7 +33,7 @@ jobs:
         with:
           persist-credentials: false
       - uses: astral-sh/setup-uv@v3
-      - uses: zackees/setup-soldr@v0
+      - uses: zackees/setup-soldr@66c33b01e682c4dbe3869c2adffd9d55f16a7d67
         with:
           cache-key-suffix: platform-boundary-research-inventory
           cache: true
diff --git a/.github/workflows/qemu-linux-runtime.yml b/.github/workflows/qemu-linux-runtime.yml
index 566b1e13..77ab2df5 100644
--- a/.github/workflows/qemu-linux-runtime.yml
+++ b/.github/workflows/qemu-linux-runtime.yml
@@ -62,7 +62,7 @@ jobs:
       - uses: astral-sh/setup-uv@v3
 
       - name: Setup soldr
-        uses: zackees/setup-soldr@v0
+        uses: zackees/setup-soldr@66c33b01e682c4dbe3869c2adffd9d55f16a7d67
         with:
           cache-key-suffix: qemu-linux-runtime-qemu_runtime
           cache: true
diff --git a/.github/workflows/template_build.yml b/.github/workflows/template_build.yml
index 8a65cf55..eb88a3b9 100644
--- a/.github/workflows/template_build.yml
+++ b/.github/workflows/template_build.yml
@@ -78,7 +78,7 @@ jobs:
         id: setup-soldr
         if: inputs.fbuild-artifact == ''
         # Canary exact setup-soldr main SHA before v0 promotion.
-        uses: zackees/setup-soldr@dfbe9627f6cb0226716b61625b99a58949162720
+        uses: zackees/setup-soldr@66c33b01e682c4dbe3869c2adffd9d55f16a7d67
         with:
           # cache-preset: foundation expands to:
           #   build-cache: true, target-cache: false,
diff --git a/.github/workflows/template_native_build.yml b/.github/workflows/template_native_build.yml
index 6ab23e5b..a8a7379d 100644
--- a/.github/workflows/template_native_build.yml
+++ b/.github/workflows/template_native_build.yml
@@ -97,7 +97,7 @@ jobs:
       - name: Setup soldr
         id: setup-soldr
         timeout-minutes: 10
-        uses: zackees/setup-soldr@v0
+        uses: zackees/setup-soldr@66c33b01e682c4dbe3869c2adffd9d55f16a7d67
         with:
           cache: true
           build-cache: true
diff --git a/ci/render_workflows.py b/ci/render_workflows.py
index ea02748b..0aa29c8a 100644
--- a/ci/render_workflows.py
+++ b/ci/render_workflows.py
@@ -220,7 +220,7 @@ def render_fbuild_bin_job(needs: str, condition: str, ref: str) -> str:
         "        with:\n"
         f"          ref: {ref}\n"
         "          persist-credentials: false\n"
-        "      - uses: zackees/setup-soldr@dfbe9627f6cb0226716b61625b99a58949162720\n"
+        "      - uses: zackees/setup-soldr@66c33b01e682c4dbe3869c2adffd9d55f16a7d67\n"
         "        with:\n"
         "          cache-preset: foundation\n"
         "          prebuild-deps-flags: \"\"\n"