diff --git a/action.yml b/action.yml
index 3ce306f..febe34e 100644
--- a/action.yml
+++ b/action.yml
@@ -20,7 +20,7 @@ runs:
   # By digest, pinned at bootstrap and moved by a reviewed commit. A tag here
   # would let whoever can push to `ci` run code in every pipeline in the
   # cluster, holding that pipeline's deploy credential.
-  image: docker://gitea.512.dev/ci/toolbox@sha256:b854a995771816ba81a49656d246aab6c2688fe4a3490be6edc81487baa5f1cb
+  image: docker://gitea.512.dev/ci/toolbox@sha256:88ed6a0562f98a35b02d0c13254d0b69b343675ac98709451d526a9c58782e40
 
   entrypoint: /usr/local/lib/actions/deploy-platform.sh
   env: