diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3c18f2b..b048d00 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,7 +20,8 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 20
     container:
-      # Idris 2 0.7.0, pinned by immutable image digest.
+      # Idris 2 0.8.0, pinned by immutable image digest.
+      # The digest is the authority; keep the version note in step with it.
       image: ghcr.io/stefan-hoeck/idris2-pack@sha256:de9781906050dc44704ec6de0108c86f899ef17b2642932b79e00245d613b8ad
     steps:
       - name: Checkout
@@ -54,8 +55,8 @@ jobs:
           ver="$(idris2 --version)"
           echo "idris2 --version -> ${ver}"
           case "$ver" in
-            *"0.7.0"*) ;;
-            *) echo "::error::expected Idris 2 0.7.0, got: ${ver}"; exit 1 ;;
+            *"0.8.0"*) ;;
+            *) echo "::error::expected Idris 2 0.8.0, got: ${ver}"; exit 1 ;;
           esac
           idris2 --typecheck abi.ipkg
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 23c62e2..88e7eec 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -34,7 +34,13 @@ jobs:
         shell: bash
         run: |
           set -euo pipefail
-          idris2 --version | grep -Fx 'Idris 2, version 0.7.0'
+          # Same fix as ci.yml: never assert through a pipe under pipefail.
+          ver="$(idris2 --version)"
+          echo "idris2 --version -> ${ver}"
+          case "$ver" in
+            *"0.8.0"*) ;;
+            *) echo "::error::expected Idris 2 0.8.0, got: ${ver}"; exit 1 ;;
+          esac
           idris2 --typecheck abi.ipkg
           (
             cd src/interface/ffi
diff --git a/.tool-versions b/.tool-versions
index ce60c32..f7b2c5e 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -6,5 +6,5 @@
 # elixir 1.18.0
 # erlang 27.2
 # zig 0.14.0
-# idris2 0.7.0
+# idris2 0.8.0
 rust nightly