diff --git a/.github/actions/local-environment-tests/action.yml b/.github/actions/local-environment-tests/action.yml
index 06e10c48e..c6c3b5332 100644
--- a/.github/actions/local-environment-tests/action.yml
+++ b/.github/actions/local-environment-tests/action.yml
@@ -45,23 +45,23 @@ outputs: {}
 runs:
   using: "composite"
   steps:
-    - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+    - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
       with:
-        version: v0.8.16
+        version: v0.8.17
         use-cache: false
 
-    # Match the tls_enabled: false setting the other self-hosted earthly jobs apply
-    # (run / test-toolkit). Without this, this action's earthly invocation has a
-    # different settings hash than the one already running on the host, and earthly's
+    # Match the tls_enabled: false setting the other self-hosted EarthBuild jobs apply
+    # (run / test-toolkit). Without this, this action's 'earth' invocation has a
+    # different settings hash than the one already running on the host, and EarthBuild's
     # reuse-or-recycle logic SIGTERMs the existing buildkitd — taking down any
-    # concurrent earthly build on the same host. Still required after the WITH DOCKER
-    # flip: it governs the *outer* earthly/buildkitd, which we deliberately keep shared.
-    - name: Disable earthly TLS (self-hosted runner has no certs)
+    # concurrent EarthBuild on the same host. Still required after the WITH DOCKER
+    # flip: it governs the *outer* EarthBuild/buildkitd, which we deliberately keep shared.
+    - name: Disable EarthBuild TLS (self-hosted runner has no certs)
       shell: bash
       run: |
         echo "    tls_enabled: false" >> .earthly/config.yml
 
-    # GHCR auth for earthly's `--pull` of the private node / indexer / toolkit images
+    # GHCR auth for EarthBuild's `--pull` of the private node / indexer / toolkit images
     # into the nested DinD daemon (writes to the per-slot DOCKER_CONFIG the caller set).
     - name: Docker Login
       uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee  #v4.2.0
@@ -82,12 +82,12 @@ runs:
         password: ${{ inputs.dockerhub-password }}
 
     # The WHOLE premerge surface — stack bring-up → verify-finality → e2e suite →
-    # toolkit multi-dest E2E — now runs INSIDE earthly's nested dockerd (+local-env-ci,
+    # toolkit multi-dest E2E — now runs INSIDE EarthBuild's nested dockerd (+local-env-ci,
     # needs `-P`). The nested daemon is ephemeral and per-invocation, so there are no
     # leftover host containers to reclaim and no fixed host ports to collide on — which
     # is why the caller drops the repo-wide concurrency group. No host-side node/just/npm
     # setup is needed (it all lives inside the target). Source .envrc so EARTHLY_CONFIG
-    # matches the other self-hosted jobs (else earthly recycles the shared buildkitd).
+    # matches the other self-hosted jobs (else EarthBuild recycles the shared buildkitd).
     - name: Deploy + test against local environment (nested dockerd)
       shell: bash
       env:
@@ -100,7 +100,7 @@ runs:
         DOCKERHUB_TOKEN: ${{ inputs.dockerhub-password }}
       run: |
         . ./.envrc
-        earthly -P \
+        earth -P \
           --secret DOCKERHUB_USER="$DOCKERHUB_USER" \
           --secret DOCKERHUB_TOKEN="$DOCKERHUB_TOKEN" \
           +local-env-ci \
diff --git a/.github/workflows/build-publish-contract-precompiles.yml b/.github/workflows/build-publish-contract-precompiles.yml
index cc4250a79..329e44c19 100644
--- a/.github/workflows/build-publish-contract-precompiles.yml
+++ b/.github/workflows/build-publish-contract-precompiles.yml
@@ -32,10 +32,10 @@ jobs:
     env:
       FORCE_COLOR: 1
     steps:
-      # Install Earthly
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      # Install EarthBuild
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -59,8 +59,8 @@ jobs:
           username: MidnightCI
           password: ${{ secrets.MIDNIGHTCI_PACKAGES_WRITE }}
 
-      # Run Earthly build with platform-specific flags
-      - name: Run Earthly build for linux/${{ matrix.platform }}
+      # Run EarthBuild with platform-specific flags
+      - name: Run EarthBuild for linux/${{ matrix.platform }}
         id: version
         env:
           PLATFORM: ${{ matrix.platform }}
@@ -70,7 +70,7 @@ jobs:
           echo "[net]" >> "$HOME"/.cargo/config
           echo "git-fetch-with-cli = true" >> "$HOME"/.cargo/config
 
-          . ./.envrc && earthly --platform="linux/$PLATFORM" --push +node-ci-image-single-platform
+          . ./.envrc && earth --platform="linux/$PLATFORM" --push +node-ci-image-single-platform
 
           RUST_VERSION=$(grep '^channel' rust-toolchain.toml | sed 's/.*"\(.*\)".*/\1/')
           COMPACTC_VERSION=$(cat COMPACTC_VERSION)
diff --git a/.github/workflows/build-publish-partnerchains-dev.yml b/.github/workflows/build-publish-partnerchains-dev.yml
index cac412c60..5ebb4f9b5 100644
--- a/.github/workflows/build-publish-partnerchains-dev.yml
+++ b/.github/workflows/build-publish-partnerchains-dev.yml
@@ -18,9 +18,9 @@ jobs:
     env:
       FORCE_COLOR: 1
     steps:
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -43,4 +43,4 @@ jobs:
           echo "[net]" >> "$HOME"/.cargo/config
           echo "git-fetch-with-cli = true" >> "$HOME"/.cargo/config
 
-          . ./.envrc && earthly --ci --push +partnerchains-dev
+          . ./.envrc && earth --ci --push +partnerchains-dev
diff --git a/.github/workflows/continuous-integration-checks.yml b/.github/workflows/continuous-integration-checks.yml
index cbfa5a895..b1846acfa 100644
--- a/.github/workflows/continuous-integration-checks.yml
+++ b/.github/workflows/continuous-integration-checks.yml
@@ -43,10 +43,10 @@ jobs:
           username: MidnightCI
           password: ${{ secrets.MIDNIGHTCI_PACKAGES_READ }}
 
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -57,7 +57,7 @@ jobs:
       - name: Run build
         if: steps.guard.outputs.hit != 'true'
         run: |
-          . ./.envrc && earthly --ci +check
+          . ./.envrc && earth --ci +check
 
       - uses: ./.github/actions/tree-cache-guard/save
         if: steps.guard.outputs.hit != 'true'
@@ -88,10 +88,10 @@ jobs:
           username: MidnightCI
           password: ${{ secrets.MIDNIGHTCI_PACKAGES_READ }}
 
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -102,7 +102,7 @@ jobs:
       - name: Run feature unification check
         if: steps.guard.outputs.hit != 'true'
         run: |
-          . ./.envrc && earthly --ci +check-feature-unification
+          . ./.envrc && earth --ci +check-feature-unification
 
       - uses: ./.github/actions/tree-cache-guard/save
         if: steps.guard.outputs.hit != 'true'
diff --git a/.github/workflows/continuous-integration-test.yml b/.github/workflows/continuous-integration-test.yml
index deb0bf767..5e41f7f62 100644
--- a/.github/workflows/continuous-integration-test.yml
+++ b/.github/workflows/continuous-integration-test.yml
@@ -35,10 +35,10 @@ jobs:
       - id: guard
         uses: ./.github/actions/tree-cache-guard
 
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -93,7 +93,7 @@ jobs:
             exit 1
           fi
           echo "Using CACHE_KEY=$CACHE_KEY"
-          . ./.envrc && earthly -P \
+          . ./.envrc && earth -P \
             --secret GITHUB_TOKEN="$GITHUB_TOKEN" \
             --secret DOCKERHUB_USER="$DOCKERHUB_USER" \
             --secret DOCKERHUB_TOKEN="$DOCKERHUB_TOKEN" \
diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
index eb7edb300..103e41439 100644
--- a/.github/workflows/continuous-integration.yml
+++ b/.github/workflows/continuous-integration.yml
@@ -45,9 +45,9 @@ jobs:
       toolkit_image_tag: ${{ steps.image_tags.outputs.toolkit_image_tag }}
       skip_build: ${{ steps.check_images.outputs.skip_build }}
     steps:
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           # Keep `use-cache: false` — that flag controls whether EarthBuild
           # caches state into GitHub Actions cache (which sets up TLS-secured
@@ -65,12 +65,12 @@ jobs:
         id: get_sha
         run: echo "sha=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT"
 
-      # TEST ONLY — let earthly manage its own buildkitd on the self-hosted
-      # runner, but without TLS (no certs are provisioned). Earthly defaults
+      # TEST ONLY — let EarthBuild manage its own buildkitd on the self-hosted
+      # runner, but without TLS (no certs are provisioned). EarthBuild defaults
       # to TLS for its managed buildkitd, which fails on a fresh runner.
       # Appending `tls_enabled: false` to the repo's existing .earthly/config.yml
-      # keeps the rest of midnight-node's earthly settings intact.
-      - name: Disable earthly TLS (self-hosted runner has no certs)
+      # keeps the rest of midnight-node's EarthBuild settings intact.
+      - name: Disable EarthBuild TLS (self-hosted runner has no certs)
         run: |
           echo "    tls_enabled: false" >> .earthly/config.yml
           echo "--- updated .earthly/config.yml ---"
@@ -171,11 +171,11 @@ jobs:
           echo "[net]" >> "$HOME"/.cargo/config
           echo "git-fetch-with-cli = true" >> "$HOME"/.cargo/config
 
-          # Retry the earthly invocation up to 3 times. Buildkit's default
+          # Retry the EarthBuild invocation up to 3 times. Buildkit's default
           # response-header timeout for registry uploads (~30s in the
           # underlying containerd resolver) isn't tunable via buildkitd.toml,
           # and the self-hosted -> ghcr.io path occasionally drops a layer push
-          # with "timeout awaiting response headers". Earthly's cache means
+          # with "timeout awaiting response headers". EaEarthBuild's cache means
           # retries skip everything that already succeeded — they essentially
           # only retry the failing push.
           #
@@ -183,17 +183,17 @@ jobs:
           # the GHA log, not collapsed.
           . ./.envrc
           for attempt in 1 2 3; do
-            echo "----- earthly attempt $attempt/3 -----"
-            if earthly --secret GITHUB_TOKEN="$GITHUB_TOKEN" -P --push +images; then
+            echo "----- EarthBuild attempt $attempt/3 -----"
+            if earth --secret GITHUB_TOKEN="$GITHUB_TOKEN" -P --push +images; then
               exit 0
             fi
-            echo "----- earthly attempt $attempt failed -----"
+            echo "----- EarthBuild attempt $attempt failed -----"
             if [ $attempt -lt 3 ]; then
               echo "sleeping 30s before retry"
               sleep 30
             fi
           done
-          echo "earthly failed after 3 attempts"
+          echo "EarthBuild failed after 3 attempts"
           exit 1
 
       - name: Upload build artifacts
@@ -249,9 +249,9 @@ jobs:
     env:
       FORCE_COLOR: 1
     steps:
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -302,7 +302,7 @@ jobs:
           echo "[net]" >> "$HOME"/.cargo/config
           echo "git-fetch-with-cli = true" >> "$HOME"/.cargo/config
 
-          . ./.envrc && earthly --secret GITHUB_TOKEN="$GITHUB_TOKEN" -P --push +images
+          . ./.envrc && earth --secret GITHUB_TOKEN="$GITHUB_TOKEN" -P --push +images
 
       - name: Upload build artifacts
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
@@ -402,10 +402,10 @@ jobs:
       - id: guard
         uses: ./.github/actions/tree-cache-guard
 
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -416,7 +416,7 @@ jobs:
           echo "[net]" >> "$HOME"/.cargo/config
           echo "git-fetch-with-cli = true" >> "$HOME"/.cargo/config
 
-          . ./.envrc && earthly +check-deps
+          . ./.envrc && earth +check-deps
 
       - uses: ./.github/actions/tree-cache-guard/save
         if: steps.guard.outputs.hit != 'true'
@@ -443,10 +443,10 @@ jobs:
       - id: guard
         uses: ./.github/actions/tree-cache-guard
 
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -476,7 +476,7 @@ jobs:
           echo "[net]" >> "$HOME"/.cargo/config
           echo "git-fetch-with-cli = true" >> "$HOME"/.cargo/config
 
-          . ./.envrc && earthly --secret GITHUB_TOKEN="$GITHUB_TOKEN" \
+          . ./.envrc && earth --secret GITHUB_TOKEN="$GITHUB_TOKEN" \
             --build-arg "NODE_IMAGE=ghcr.io/midnight-ntwrk/midnight-node:${{ needs.run.outputs.node_image_tag }}" \
             --build-arg "TOOLKIT_IMAGE=ghcr.io/midnight-ntwrk/midnight-node-toolkit:${{ needs.run.outputs.toolkit_image_tag }}" \
             +rebuild-genesis
@@ -504,10 +504,10 @@ jobs:
       - id: guard
         uses: ./.github/actions/tree-cache-guard
 
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -528,7 +528,7 @@ jobs:
             exit 1
           fi
           echo "Using CACHE_KEY=$CACHE_KEY"
-          . ./.envrc && earthly -P --strict \
+          . ./.envrc && earth -P --strict \
             +test-pallet-fixtures --CACHE_KEY="$CACHE_KEY"
 
       - uses: ./.github/actions/tree-cache-guard/save
@@ -557,10 +557,10 @@ jobs:
       - id: guard
         uses: ./.github/actions/tree-cache-guard
 
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -581,7 +581,7 @@ jobs:
           password: ${{ secrets.MIDNIGHTCI_PACKAGES_WRITE }}
 
       # Earthfile FROMs midnightntwrk/midnight-node-ci and other docker.io
-      # images; earthly pushes inline cache back to those repos under --push,
+      # images; EarthBuild pushes inline cache back to those repos under --push,
       # which needs Docker Hub auth.
       # Non-fatal: pushes target ghcr.io and the docker.io base images are
       # public, so the build proceeds without these creds (e.g. Dependabot runs,
@@ -598,11 +598,11 @@ jobs:
         if: steps.guard.outputs.hit != 'true' && runner.environment != 'self-hosted'
         run: scripts/free-disk-space.sh
 
-      # Self-hosted-runner-specific: earthly's managed buildkitd defaults to TLS
+      # Self-hosted-runner-specific: EarthBuild's managed buildkitd defaults to TLS
       # but no certs are provisioned on the runner. Append tls_enabled: false
-      # to the workspace .earthly/config.yml so earthly skips TLS for its own
+      # to the workspace .earthly/config.yml so EarthBuild skips TLS for its own
       # buildkitd container.
-      - name: Disable earthly TLS (self-hosted runner has no certs)
+      - name: Disable EarthBuildEarthBuild TLS (self-hosted runner has no certs)
         if: steps.guard.outputs.hit != 'true'
         run: |
           echo "    tls_enabled: false" >> .earthly/config.yml
@@ -617,7 +617,7 @@ jobs:
           DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_MIDNIGHTNTWRK_TOKEN }}
           EVENT_NAME: ${{ github.event_name }}
           # Self-hosted-runner-specific: runner systemd unit has PrivateTmp=true.
-          # Force earthly's tempdir to live under $RUNNER_TEMP which is
+          # Force EarthBuild's tempdir to live under $RUNNER_TEMP which is
           # outside the per-service PrivateTmp namespace.
           TMPDIR: ${{ runner.temp }}
           # Force-clear in case a runner process has stale EARTHLY_REMOTE_CACHE
@@ -625,7 +625,7 @@ jobs:
           EARTHLY_REMOTE_CACHE: ""
           # The runner's .env redirects ACTIONS_CACHE_URL to a local cache
           # server. Earthly auto-detects this and tries to push to it with the
-          # wrong auth; override to empty for the earthly call.
+          # wrong auth; override to empty for the EarthBuild call.
           ACTIONS_CACHE_URL: ""
           ACTIONS_RUNTIME_URL: ""
           # +test-toolkit pulls in +build-test-toolkit's `target-${CACHE_KEY}`
@@ -645,7 +645,7 @@ jobs:
             exit 1
           fi
           echo "Using CACHE_KEY=$CACHE_KEY"
-          . ./.envrc && earthly --secret GITHUB_TOKEN="$GITHUB_TOKEN" \
+          . ./.envrc && earth --secret GITHUB_TOKEN="$GITHUB_TOKEN" \
             --secret DOCKERHUB_USER="$DOCKERHUB_USER" \
             --secret DOCKERHUB_TOKEN="$DOCKERHUB_TOKEN" \
             -P --strict $PUSH_FLAG \
@@ -806,10 +806,10 @@ jobs:
           submodules: true
       - id: guard
         uses: ./.github/actions/tree-cache-guard
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
       - name: Login to GHCR
@@ -823,7 +823,7 @@ jobs:
       - name: Run metadata check
         if: steps.guard.outputs.hit != 'true'
         run: |
-          . ./.envrc && earthly --ci -P \
+          . ./.envrc && earth --ci -P \
             --build-arg "NODE_IMAGE=ghcr.io/midnight-ntwrk/midnight-node:${{ needs.run.outputs.node_image_tag }}" \
             +check-metadata
       - uses: ./.github/actions/tree-cache-guard/save
@@ -1115,12 +1115,12 @@ jobs:
     # Fork PRs run on ubuntu-latest, not the self-hosted pool: untrusted PR code is kept
     # off our own infrastructure. Same-repo PRs and push/merge_group keep self-hosted.
     runs-on: ${{ (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name != github.repository) && fromJSON('["ubuntu-latest"]') || fromJSON('["self-hosted", "tier:medium"]') }}
-    # No concurrency group: the local-env stack now runs INSIDE earthly's nested dockerd
+    # No concurrency group: the local-env stack now runs INSIDE EarthBuild's nested dockerd
     # (+local-env-ci), which gives each invocation its own network namespace. The stack
     # no longer binds fixed host ports (1442/1337/8088/4222/5432/30000/32000/9933-9944),
     # so concurrent PRs on the same self-hosted host can't collide — the repo-wide
     # `local-environment-tests-self-hosted` serialization is gone. Concurrency is now
-    # RAM-bounded (the shared buildkit/RAM pool), which earthly queues, not hard-serialized.
+    # RAM-bounded (the shared buildkit/RAM pool), which EarthBuild queues, not hard-serialized.
     permissions:
       pull-requests: write
       packages: read
@@ -1138,7 +1138,7 @@ jobs:
       # Isolate docker config per job — see the matching step in the `run` job.
       # This job runs concurrently, so per-job isolation matters: multiple
       # instances log in at once and would otherwise clobber each other's docker
-      # auth. Inherited by the composite action's docker login and earthly --pull.
+      # auth. Inherited by the composite action's docker login and EarthBuild --pull.
       - name: Isolate docker config
         if: steps.guard.outputs.hit != 'true'
         run: |
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 59d180d0e..894fc7453 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -32,9 +32,9 @@ jobs:
       id-token: write
       attestations: write  # Required for GitHub native attestations
     steps:
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -103,9 +103,9 @@ jobs:
           IMAGE_TAG: ${{ steps.check-images.outputs.IMAGE_TAG }}
         run: |
           echo "Images already exist for ${IMAGE_TAG}-amd64, skipping build"
-          . ./.envrc && earthly +extract-node-artifacts \
+          . ./.envrc && earth +extract-node-artifacts \
             --NODE_IMAGE="ghcr.io/midnight-ntwrk/midnight-node:${IMAGE_TAG}-amd64"
-          . ./.envrc && earthly +extract-toolkit-artifacts \
+          . ./.envrc && earth +extract-toolkit-artifacts \
             --TOOLKIT_IMAGE="ghcr.io/midnight-ntwrk/midnight-node-toolkit:${IMAGE_TAG}-amd64"
 
       - name: Free disk space
@@ -126,8 +126,8 @@ jobs:
 
           # We don't use --ci as we want artifacts to be saved
           # AND we can't use --strict or --ci because we're using LOCALLY in both +node-image and +toolkit-image
-          . ./.envrc && earthly -P --use-inline-cache --save-inline-cache --push +node-image
-          . ./.envrc && earthly --secret GITHUB_TOKEN="$GITHUB_TOKEN" -P --push +toolkit-image
+          . ./.envrc && earth -P --use-inline-cache --save-inline-cache --push +node-image
+          . ./.envrc && earth --secret GITHUB_TOKEN="$GITHUB_TOKEN" -P --push +toolkit-image
 
       - name: Get image digests
         id: digests
@@ -254,9 +254,9 @@ jobs:
       id-token: write
       attestations: write  # Required for GitHub native attestations
     steps:
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -300,9 +300,9 @@ jobs:
           IMAGE_TAG: ${{ steps.check-images.outputs.IMAGE_TAG }}
         run: |
           echo "Images already exist for ${IMAGE_TAG}-arm64, skipping build"
-          . ./.envrc && earthly +extract-node-artifacts \
+          . ./.envrc && earth +extract-node-artifacts \
             --NODE_IMAGE="ghcr.io/midnight-ntwrk/midnight-node:${IMAGE_TAG}-arm64"
-          . ./.envrc && earthly +extract-toolkit-artifacts \
+          . ./.envrc && earth +extract-toolkit-artifacts \
             --TOOLKIT_IMAGE="ghcr.io/midnight-ntwrk/midnight-node-toolkit:${IMAGE_TAG}-arm64"
 
       - name: Run Node and toolkit builds
@@ -314,8 +314,8 @@ jobs:
           echo "[net]" >> "$HOME"/.cargo/config
           echo "git-fetch-with-cli = true" >> "$HOME"/.cargo/config
 
-          . ./.envrc && earthly -P --use-inline-cache --save-inline-cache --push +node-image
-          . ./.envrc && earthly --secret GITHUB_TOKEN="$GITHUB_TOKEN" -P --push +toolkit-image
+          . ./.envrc && earth -P --use-inline-cache --save-inline-cache --push +node-image
+          . ./.envrc && earth --secret GITHUB_TOKEN="$GITHUB_TOKEN" -P --push +toolkit-image
 
       - name: Get image digests
         id: digests
@@ -544,7 +544,7 @@ jobs:
         env:
           IMAGE_TAG: ${{ needs.publish-amd64.outputs.IMAGE_TAG }}
         run: |
-          # Needed only for older branches where Earthly is not pushing to midnightntwrk
+          # Needed only for older branches where EartEarthBuildhly is not pushing to midnightntwrk
           for IMAGE in midnight-node midnight-node-toolkit; do
             for ARCH in amd64 arm64; do
               SRC="ghcr.io/midnight-ntwrk/${IMAGE}:${IMAGE_TAG}-${ARCH}"
@@ -565,7 +565,7 @@ jobs:
           IMAGE_TAG: ${{ needs.publish-amd64.outputs.IMAGE_TAG }}
         run: |
           for IMAGE in midnight-node midnight-node-toolkit; do
-            # Arch-specific images already pushed by Earthly; create multi-arch manifest
+            # Arch-specific images already pushed by EarthBuild; create multi-arch manifest
             docker buildx imagetools create \
               --tag "ghcr.io/midnightntwrk/${IMAGE}:${IMAGE_TAG}" \
               "ghcr.io/midnightntwrk/${IMAGE}:${IMAGE_TAG}-amd64" \
diff --git a/.github/workflows/nightly-build-check.yml b/.github/workflows/nightly-build-check.yml
index da9e75116..de3a5b3a5 100644
--- a/.github/workflows/nightly-build-check.yml
+++ b/.github/workflows/nightly-build-check.yml
@@ -24,9 +24,9 @@ jobs:
         with:
           submodules: true
 
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -42,4 +42,4 @@ jobs:
           echo "[net]" >> "$HOME"/.cargo/config
           echo "git-fetch-with-cli = true" >> "$HOME"/.cargo/config
 
-          . ./.envrc && earthly -P --ci --platform=linux/amd64 +node-image
+          . ./.envrc && earth -P --ci --platform=linux/amd64 +node-image
diff --git a/.github/workflows/rebuild-chainspec-bot.yml b/.github/workflows/rebuild-chainspec-bot.yml
index e46dd98ab..9c6fc5a05 100644
--- a/.github/workflows/rebuild-chainspec-bot.yml
+++ b/.github/workflows/rebuild-chainspec-bot.yml
@@ -12,7 +12,7 @@ on:
         description: 'Space-separated network names (e.g., "qanet preview")'
         required: true
       version:
-        description: 'Optional node image version (e.g., "0.22.0") — sets --NODE_IMAGE on earthly'
+        description: 'Optional node image version (e.g., "0.22.0") — sets --NODE_IMAGE on EarthBuild'
         required: false
 
 jobs:
@@ -129,10 +129,10 @@ jobs:
             fi
           done
 
-      - name: Setup Earthly
-        uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - name: Setup EarthBuild
+        uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -159,10 +159,10 @@ jobs:
             echo "Using node image: $NODE_IMAGE"
           fi
 
-          # Split networks and run earthly for each
+          # Split networks and run EarthBuild for each
           for network in $NETWORKS; do
             echo "Rebuilding chainspec for network: $network"
-            earthly -P +rebuild-chainspec --NETWORK="$network" --NODE_IMAGE="$NODE_IMAGE"
+            earth -P +rebuild-chainspec --NETWORK="$network" --NODE_IMAGE="$NODE_IMAGE"
           done
 
       - name: Commit and push changes
diff --git a/.github/workflows/rebuild-metadata-bot.yml b/.github/workflows/rebuild-metadata-bot.yml
index 918e9691a..902e455f1 100644
--- a/.github/workflows/rebuild-metadata-bot.yml
+++ b/.github/workflows/rebuild-metadata-bot.yml
@@ -83,10 +83,10 @@ jobs:
           token: ${{ secrets.GITHUB_TOKEN }}
           fetch-depth: 0
 
-      - name: Setup Earthly
-        uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - name: Setup EarthBuild
+        uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -104,7 +104,7 @@ jobs:
           mkdir -p "$HOME"/.cargo
           echo "[net]" >> "$HOME"/.cargo/config
           echo "git-fetch-with-cli = true" >> "$HOME"/.cargo/config
-          earthly -P +rebuild-metadata
+          earth -P +rebuild-metadata
 
       - name: Commit and push changes
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
diff --git a/.github/workflows/security-audit-scan.yml b/.github/workflows/security-audit-scan.yml
index a0cf376cd..f9591a80a 100644
--- a/.github/workflows/security-audit-scan.yml
+++ b/.github/workflows/security-audit-scan.yml
@@ -33,17 +33,17 @@ jobs:
       - id: guard
         uses: ./.github/actions/tree-cache-guard
 
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
       - name: Run cargo deny
         if: steps.guard.outputs.hit != 'true'
         run: |
-          . ./.envrc && earthly --use-inline-cache --strict +audit-rust
+          . ./.envrc && earth --use-inline-cache --strict +audit-rust
 
       - name: Fix cargo-deny SARIF format
         if: steps.guard.outputs.hit != 'true' && hashFiles('scan_reports/cargo-deny.sarif') != ''
@@ -85,17 +85,17 @@ jobs:
       - id: guard
         uses: ./.github/actions/tree-cache-guard
 
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
       - name: Run npm audit
         if: steps.guard.outputs.hit != 'true'
         run: |
-          . ./.envrc && earthly --use-inline-cache --strict +audit-nodejs
+          . ./.envrc && earth --use-inline-cache --strict +audit-nodejs
 
       - name: Upload npm-audit-local-environment SARIF
         uses: github/codeql-action/upload-sarif@ce729e4d353d580e6cacd6a8cf2921b72e5e310a #codeql-bundle-v2.23.6
diff --git a/.github/workflows/srtool-build.yml b/.github/workflows/srtool-build.yml
index 68dc03b56..606daec57 100644
--- a/.github/workflows/srtool-build.yml
+++ b/.github/workflows/srtool-build.yml
@@ -51,16 +51,16 @@ jobs:
           submodules: true
           ref: ${{ inputs.ref }}
 
-      - name: Setup Earthly
-        uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - name: Setup EarthBuild
+        uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
       - name: Run srtool build
         run: |
-          . ./.envrc && earthly +srtool-build
+          . ./.envrc && earth +srtool-build
 
       - name: Rename WASM assets with version
         if: inputs.runtime-tag-release != ''
diff --git a/partner-chains/.github/actions/tests/argocd-tests/action.yml b/partner-chains/.github/actions/tests/argocd-tests/action.yml
index 87cdd5890..83eff4f5f 100644
--- a/partner-chains/.github/actions/tests/argocd-tests/action.yml
+++ b/partner-chains/.github/actions/tests/argocd-tests/action.yml
@@ -75,12 +75,12 @@ runs:
         role-to-assume: ${{ env.AWS_ROLE_ARN_ }}
         aws-region: "eu-central-1"
 
-    - name: Setup earthly
-      uses: earthly/actions-setup@v1
+    - name: Setup EarthBuild
+      uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
       with:
         github-token: ${{ github.token }}
         use-cache: false
-        version: ^0.8.0
+        version: v0.8.17
 
     - name: Run Tests
       env:
@@ -91,7 +91,7 @@ runs:
         JOB_URL: "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
       run: |
         cd e2e-tests
-        earthly --secret AWS_SESSION_TOKEN="$AWS_SESSION_TOKEN" \
+        earth --secret AWS_SESSION_TOKEN="$AWS_SESSION_TOKEN" \
                 --secret AWS_ACCESS_KEY_ID="$AWS_ACCESS_KEY_ID" \
                 --secret AWS_SECRET_ACCESS_KEY="$AWS_SECRET_ACCESS_KEY" \
                 --secret SLACK_WEBHOOK_URL="$SLACK_WEBHOOK_URL" \
diff --git a/partner-chains/.github/workflows/e2e-tests.yml b/partner-chains/.github/workflows/e2e-tests.yml
index e6b4c9085..f2c25446a 100644
--- a/partner-chains/.github/workflows/e2e-tests.yml
+++ b/partner-chains/.github/workflows/e2e-tests.yml
@@ -78,12 +78,12 @@ jobs:
       run: |
         echo "REPORT_TO_XRAY=$([[ -n "$INPUT_PLAN" || -n "$INPUT_EXECUTION" ]] && echo true || echo false )" >> $GITHUB_ENV
 
-    - name: install earthly
-      uses: earthly/actions-setup@v1
+    - name: install EarthBuild
+      uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
       with:
         github-token: ${{ github.token }}
         use-cache: true
-        version: ^0.7.0
+        version: v0.8.17
 
     - name: run
       env:
@@ -107,7 +107,7 @@ jobs:
         K8S_SA_TOKEN: ${{ secrets.K8S_SA_TOKEN }}
       run: |
         cd e2e-tests
-        earthly \
+        earth \
           --secret AWS_SESSION_TOKEN="$AWS_SESSION_TOKEN" \
           --secret AWS_ACCESS_KEY_ID="$AWS_ACCESS_KEY_ID" \
           --secret AWS_SECRET_ACCESS_KEY="$AWS_SECRET_ACCESS_KEY" \