diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5d08c9f..b996603 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,8 +14,8 @@ on:
 # The kit-pin job below fails CI when this pin falls behind the newest
 # published binary release, so drift can't accumulate silently again.
 env:
-  SHELLCADE_KIT_VERSION: "2.3.0"
-  SHELLCADE_KIT_SHA256: "79fbc6d7290c52fa1c0b9a513e08599195af5af17d8d945926520763d7ac62bb"
+  SHELLCADE_KIT_VERSION: "2.8.0"
+  SHELLCADE_KIT_SHA256: "e7cd9dde11ff9a8c60815dee056a1c33bc35e6aef7c8131417c52e28b9c4a195"
 
 jobs:
   # Toolchain pin lockstep: the SHELLCADE_KIT_VERSION pin above is a manual