From 84c9a3d9d674f044bb9ed94943d9d21ca3a30736 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 25 Jun 2026 13:03:59 +0000
Subject: [PATCH 1/3] chore(deps): bump EarthBuild/actions-setup

Bumps [EarthBuild/actions-setup](https://github.com/earthbuild/actions-setup) from cae2d9ab68894d8402751fe42e07c7cca0272f7f to 3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb.
- [Release notes](https://github.com/earthbuild/actions-setup/releases)
- [Commits](https://github.com/earthbuild/actions-setup/compare/cae2d9ab68894d8402751fe42e07c7cca0272f7f...3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb)

---
updated-dependencies:
- dependency-name: EarthBuild/actions-setup
  dependency-version: 3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .../build-publish-contract-precompiles.yml         |  2 +-
 .../workflows/build-publish-partnerchains-dev.yml  |  2 +-
 .../workflows/continuous-integration-checks.yml    |  4 ++--
 .github/workflows/continuous-integration-test.yml  |  2 +-
 .github/workflows/continuous-integration.yml       | 14 +++++++-------
 .github/workflows/main.yml                         |  4 ++--
 .github/workflows/nightly-build-check.yml          |  2 +-
 .github/workflows/rebuild-chainspec-bot.yml        |  2 +-
 .github/workflows/rebuild-metadata-bot.yml         |  2 +-
 .github/workflows/security-audit-scan.yml          |  4 ++--
 .github/workflows/srtool-build.yml                 |  2 +-
 11 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/.github/workflows/build-publish-contract-precompiles.yml b/.github/workflows/build-publish-contract-precompiles.yml
index cc4250a79..e88023c9f 100644
--- a/.github/workflows/build-publish-contract-precompiles.yml
+++ b/.github/workflows/build-publish-contract-precompiles.yml
@@ -33,7 +33,7 @@ jobs:
       FORCE_COLOR: 1
     steps:
       # Install Earthly
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
           version: v0.8.16
           github-token: ${{ github.token }}
diff --git a/.github/workflows/build-publish-partnerchains-dev.yml b/.github/workflows/build-publish-partnerchains-dev.yml
index cac412c60..b5624acd2 100644
--- a/.github/workflows/build-publish-partnerchains-dev.yml
+++ b/.github/workflows/build-publish-partnerchains-dev.yml
@@ -18,7 +18,7 @@ jobs:
     env:
       FORCE_COLOR: 1
     steps:
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
           version: v0.8.16
           github-token: ${{ github.token }}
diff --git a/.github/workflows/continuous-integration-checks.yml b/.github/workflows/continuous-integration-checks.yml
index cbfa5a895..f4c112b9e 100644
--- a/.github/workflows/continuous-integration-checks.yml
+++ b/.github/workflows/continuous-integration-checks.yml
@@ -43,7 +43,7 @@ jobs:
           username: MidnightCI
           password: ${{ secrets.MIDNIGHTCI_PACKAGES_READ }}
 
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
           version: v0.8.16
@@ -88,7 +88,7 @@ jobs:
           username: MidnightCI
           password: ${{ secrets.MIDNIGHTCI_PACKAGES_READ }}
 
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
           version: v0.8.16
diff --git a/.github/workflows/continuous-integration-test.yml b/.github/workflows/continuous-integration-test.yml
index deb0bf767..97c1783ce 100644
--- a/.github/workflows/continuous-integration-test.yml
+++ b/.github/workflows/continuous-integration-test.yml
@@ -35,7 +35,7 @@ jobs:
       - id: guard
         uses: ./.github/actions/tree-cache-guard
 
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
           version: v0.8.16
diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
index eb7edb300..44394ba5a 100644
--- a/.github/workflows/continuous-integration.yml
+++ b/.github/workflows/continuous-integration.yml
@@ -45,7 +45,7 @@ jobs:
       toolkit_image_tag: ${{ steps.image_tags.outputs.toolkit_image_tag }}
       skip_build: ${{ steps.check_images.outputs.skip_build }}
     steps:
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
           version: v0.8.16
           github-token: ${{ github.token }}
@@ -249,7 +249,7 @@ jobs:
     env:
       FORCE_COLOR: 1
     steps:
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
           version: v0.8.16
           github-token: ${{ github.token }}
@@ -402,7 +402,7 @@ jobs:
       - id: guard
         uses: ./.github/actions/tree-cache-guard
 
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
           version: v0.8.16
@@ -443,7 +443,7 @@ jobs:
       - id: guard
         uses: ./.github/actions/tree-cache-guard
 
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
           version: v0.8.16
@@ -504,7 +504,7 @@ jobs:
       - id: guard
         uses: ./.github/actions/tree-cache-guard
 
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
           version: v0.8.16
@@ -557,7 +557,7 @@ jobs:
       - id: guard
         uses: ./.github/actions/tree-cache-guard
 
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
           version: v0.8.16
@@ -806,7 +806,7 @@ jobs:
           submodules: true
       - id: guard
         uses: ./.github/actions/tree-cache-guard
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
           version: v0.8.16
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 59d180d0e..86b964b7d 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -32,7 +32,7 @@ jobs:
       id-token: write
       attestations: write  # Required for GitHub native attestations
     steps:
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
           version: v0.8.16
           github-token: ${{ github.token }}
@@ -254,7 +254,7 @@ jobs:
       id-token: write
       attestations: write  # Required for GitHub native attestations
     steps:
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
           version: v0.8.16
           github-token: ${{ github.token }}
diff --git a/.github/workflows/nightly-build-check.yml b/.github/workflows/nightly-build-check.yml
index da9e75116..f48d23425 100644
--- a/.github/workflows/nightly-build-check.yml
+++ b/.github/workflows/nightly-build-check.yml
@@ -24,7 +24,7 @@ jobs:
         with:
           submodules: true
 
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
           version: v0.8.16
           github-token: ${{ github.token }}
diff --git a/.github/workflows/rebuild-chainspec-bot.yml b/.github/workflows/rebuild-chainspec-bot.yml
index e46dd98ab..70639f71f 100644
--- a/.github/workflows/rebuild-chainspec-bot.yml
+++ b/.github/workflows/rebuild-chainspec-bot.yml
@@ -130,7 +130,7 @@ jobs:
           done
 
       - name: Setup Earthly
-        uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+        uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
           version: v0.8.16
           github-token: ${{ github.token }}
diff --git a/.github/workflows/rebuild-metadata-bot.yml b/.github/workflows/rebuild-metadata-bot.yml
index 918e9691a..8ff6a19c7 100644
--- a/.github/workflows/rebuild-metadata-bot.yml
+++ b/.github/workflows/rebuild-metadata-bot.yml
@@ -84,7 +84,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Earthly
-        uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+        uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
           version: v0.8.16
           github-token: ${{ github.token }}
diff --git a/.github/workflows/security-audit-scan.yml b/.github/workflows/security-audit-scan.yml
index a0cf376cd..009923f9a 100644
--- a/.github/workflows/security-audit-scan.yml
+++ b/.github/workflows/security-audit-scan.yml
@@ -33,7 +33,7 @@ jobs:
       - id: guard
         uses: ./.github/actions/tree-cache-guard
 
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
           version: v0.8.16
@@ -85,7 +85,7 @@ jobs:
       - id: guard
         uses: ./.github/actions/tree-cache-guard
 
-      - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+      - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
           version: v0.8.16
diff --git a/.github/workflows/srtool-build.yml b/.github/workflows/srtool-build.yml
index 68dc03b56..c9854ecba 100644
--- a/.github/workflows/srtool-build.yml
+++ b/.github/workflows/srtool-build.yml
@@ -52,7 +52,7 @@ jobs:
           ref: ${{ inputs.ref }}
 
       - name: Setup Earthly
-        uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+        uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
           version: v0.8.16
           github-token: ${{ github.token }}

From bcba55ccd451f16a0af57856e97a0637ccac71c2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Lech=20G=C5=82owiak?= <lech.glowiak@shielded.io>
Date: Fri, 26 Jun 2026 07:45:54 +0200
Subject: [PATCH 2/3] Update version to 0.8.17
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Lech Głowiak <lech.glowiak@shielded.io>
---
 .github/actions/local-environment-tests/action.yml |  2 +-
 .../build-publish-contract-precompiles.yml         |  2 +-
 .../workflows/build-publish-partnerchains-dev.yml  |  2 +-
 .../workflows/continuous-integration-checks.yml    |  4 ++--
 .github/workflows/continuous-integration-test.yml  |  2 +-
 .github/workflows/continuous-integration.yml       | 14 +++++++-------
 .github/workflows/main.yml                         |  4 ++--
 .github/workflows/nightly-build-check.yml          |  2 +-
 .github/workflows/rebuild-chainspec-bot.yml        |  2 +-
 .github/workflows/rebuild-metadata-bot.yml         |  2 +-
 .github/workflows/security-audit-scan.yml          |  4 ++--
 .github/workflows/srtool-build.yml                 |  2 +-
 12 files changed, 21 insertions(+), 21 deletions(-)

diff --git a/.github/actions/local-environment-tests/action.yml b/.github/actions/local-environment-tests/action.yml
index 06e10c48e..d9145f497 100644
--- a/.github/actions/local-environment-tests/action.yml
+++ b/.github/actions/local-environment-tests/action.yml
@@ -47,7 +47,7 @@ runs:
   steps:
     - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
       with:
-        version: v0.8.16
+        version: v0.8.17
         use-cache: false
 
     # Match the tls_enabled: false setting the other self-hosted earthly jobs apply
diff --git a/.github/workflows/build-publish-contract-precompiles.yml b/.github/workflows/build-publish-contract-precompiles.yml
index e88023c9f..4ac5649ff 100644
--- a/.github/workflows/build-publish-contract-precompiles.yml
+++ b/.github/workflows/build-publish-contract-precompiles.yml
@@ -35,7 +35,7 @@ jobs:
       # Install Earthly
       - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
diff --git a/.github/workflows/build-publish-partnerchains-dev.yml b/.github/workflows/build-publish-partnerchains-dev.yml
index b5624acd2..3e4a5b6a8 100644
--- a/.github/workflows/build-publish-partnerchains-dev.yml
+++ b/.github/workflows/build-publish-partnerchains-dev.yml
@@ -20,7 +20,7 @@ jobs:
     steps:
       - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
diff --git a/.github/workflows/continuous-integration-checks.yml b/.github/workflows/continuous-integration-checks.yml
index f4c112b9e..427a4904a 100644
--- a/.github/workflows/continuous-integration-checks.yml
+++ b/.github/workflows/continuous-integration-checks.yml
@@ -46,7 +46,7 @@ jobs:
       - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -91,7 +91,7 @@ jobs:
       - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
diff --git a/.github/workflows/continuous-integration-test.yml b/.github/workflows/continuous-integration-test.yml
index 97c1783ce..56b163e7a 100644
--- a/.github/workflows/continuous-integration-test.yml
+++ b/.github/workflows/continuous-integration-test.yml
@@ -38,7 +38,7 @@ jobs:
       - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
index 44394ba5a..97d0d39c0 100644
--- a/.github/workflows/continuous-integration.yml
+++ b/.github/workflows/continuous-integration.yml
@@ -47,7 +47,7 @@ jobs:
     steps:
       - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           # Keep `use-cache: false` — that flag controls whether EarthBuild
           # caches state into GitHub Actions cache (which sets up TLS-secured
@@ -251,7 +251,7 @@ jobs:
     steps:
       - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -405,7 +405,7 @@ jobs:
       - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -446,7 +446,7 @@ jobs:
       - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -507,7 +507,7 @@ jobs:
       - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -560,7 +560,7 @@ jobs:
       - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -809,7 +809,7 @@ jobs:
       - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
       - name: Login to GHCR
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 86b964b7d..c27eca014 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -34,7 +34,7 @@ jobs:
     steps:
       - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -256,7 +256,7 @@ jobs:
     steps:
       - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
diff --git a/.github/workflows/nightly-build-check.yml b/.github/workflows/nightly-build-check.yml
index f48d23425..ece6f0c92 100644
--- a/.github/workflows/nightly-build-check.yml
+++ b/.github/workflows/nightly-build-check.yml
@@ -26,7 +26,7 @@ jobs:
 
       - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
diff --git a/.github/workflows/rebuild-chainspec-bot.yml b/.github/workflows/rebuild-chainspec-bot.yml
index 70639f71f..a16bca257 100644
--- a/.github/workflows/rebuild-chainspec-bot.yml
+++ b/.github/workflows/rebuild-chainspec-bot.yml
@@ -132,7 +132,7 @@ jobs:
       - name: Setup Earthly
         uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
diff --git a/.github/workflows/rebuild-metadata-bot.yml b/.github/workflows/rebuild-metadata-bot.yml
index 8ff6a19c7..4a49b7302 100644
--- a/.github/workflows/rebuild-metadata-bot.yml
+++ b/.github/workflows/rebuild-metadata-bot.yml
@@ -86,7 +86,7 @@ jobs:
       - name: Setup Earthly
         uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
diff --git a/.github/workflows/security-audit-scan.yml b/.github/workflows/security-audit-scan.yml
index 009923f9a..efa25c5ae 100644
--- a/.github/workflows/security-audit-scan.yml
+++ b/.github/workflows/security-audit-scan.yml
@@ -36,7 +36,7 @@ jobs:
       - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
@@ -88,7 +88,7 @@ jobs:
       - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         if: steps.guard.outputs.hit != 'true'
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 
diff --git a/.github/workflows/srtool-build.yml b/.github/workflows/srtool-build.yml
index c9854ecba..ee254a60a 100644
--- a/.github/workflows/srtool-build.yml
+++ b/.github/workflows/srtool-build.yml
@@ -54,7 +54,7 @@ jobs:
       - name: Setup Earthly
         uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
-          version: v0.8.16
+          version: v0.8.17
           github-token: ${{ github.token }}
           use-cache: false
 

From 651b702b2e09e794d12c7dcc09cfd3cccac1a2a8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Lech=20G=C5=82owiak?= <lech.glowiak@shielded.io>
Date: Fri, 26 Jun 2026 07:48:12 +0200
Subject: [PATCH 3/3] Use earth instead of earthly WIP
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Lech Głowiak <lech.glowiak@shielded.io>
---
 .../local-environment-tests/action.yml        | 22 ++++----
 .../build-publish-contract-precompiles.yml    |  8 +--
 .../build-publish-partnerchains-dev.yml       |  2 +-
 .../continuous-integration-checks.yml         |  4 +-
 .../workflows/continuous-integration-test.yml |  2 +-
 .github/workflows/continuous-integration.yml  | 50 +++++++++----------
 .github/workflows/main.yml                    | 20 ++++----
 .github/workflows/nightly-build-check.yml     |  2 +-
 .github/workflows/rebuild-chainspec-bot.yml   |  8 +--
 .github/workflows/rebuild-metadata-bot.yml    |  4 +-
 .github/workflows/security-audit-scan.yml     |  4 +-
 .github/workflows/srtool-build.yml            |  4 +-
 .../actions/tests/argocd-tests/action.yml     |  8 +--
 .../.github/workflows/e2e-tests.yml           |  8 +--
 14 files changed, 73 insertions(+), 73 deletions(-)

diff --git a/.github/actions/local-environment-tests/action.yml b/.github/actions/local-environment-tests/action.yml
index d9145f497..c6c3b5332 100644
--- a/.github/actions/local-environment-tests/action.yml
+++ b/.github/actions/local-environment-tests/action.yml
@@ -45,23 +45,23 @@ outputs: {}
 runs:
   using: "composite"
   steps:
-    - uses: EarthBuild/actions-setup@cae2d9ab68894d8402751fe42e07c7cca0272f7f
+    - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
       with:
         version: v0.8.17
         use-cache: false
 
-    # Match the tls_enabled: false setting the other self-hosted earthly jobs apply
-    # (run / test-toolkit). Without this, this action's earthly invocation has a
-    # different settings hash than the one already running on the host, and earthly's
+    # Match the tls_enabled: false setting the other self-hosted EarthBuild jobs apply
+    # (run / test-toolkit). Without this, this action's 'earth' invocation has a
+    # different settings hash than the one already running on the host, and EarthBuild's
     # reuse-or-recycle logic SIGTERMs the existing buildkitd — taking down any
-    # concurrent earthly build on the same host. Still required after the WITH DOCKER
-    # flip: it governs the *outer* earthly/buildkitd, which we deliberately keep shared.
-    - name: Disable earthly TLS (self-hosted runner has no certs)
+    # concurrent EarthBuild on the same host. Still required after the WITH DOCKER
+    # flip: it governs the *outer* EarthBuild/buildkitd, which we deliberately keep shared.
+    - name: Disable EarthBuild TLS (self-hosted runner has no certs)
       shell: bash
       run: |
         echo "    tls_enabled: false" >> .earthly/config.yml
 
-    # GHCR auth for earthly's `--pull` of the private node / indexer / toolkit images
+    # GHCR auth for EarthBuild's `--pull` of the private node / indexer / toolkit images
     # into the nested DinD daemon (writes to the per-slot DOCKER_CONFIG the caller set).
     - name: Docker Login
       uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee  #v4.2.0
@@ -82,12 +82,12 @@ runs:
         password: ${{ inputs.dockerhub-password }}
 
     # The WHOLE premerge surface — stack bring-up → verify-finality → e2e suite →
-    # toolkit multi-dest E2E — now runs INSIDE earthly's nested dockerd (+local-env-ci,
+    # toolkit multi-dest E2E — now runs INSIDE EarthBuild's nested dockerd (+local-env-ci,
     # needs `-P`). The nested daemon is ephemeral and per-invocation, so there are no
     # leftover host containers to reclaim and no fixed host ports to collide on — which
     # is why the caller drops the repo-wide concurrency group. No host-side node/just/npm
     # setup is needed (it all lives inside the target). Source .envrc so EARTHLY_CONFIG
-    # matches the other self-hosted jobs (else earthly recycles the shared buildkitd).
+    # matches the other self-hosted jobs (else EarthBuild recycles the shared buildkitd).
     - name: Deploy + test against local environment (nested dockerd)
       shell: bash
       env:
@@ -100,7 +100,7 @@ runs:
         DOCKERHUB_TOKEN: ${{ inputs.dockerhub-password }}
       run: |
         . ./.envrc
-        earthly -P \
+        earth -P \
           --secret DOCKERHUB_USER="$DOCKERHUB_USER" \
           --secret DOCKERHUB_TOKEN="$DOCKERHUB_TOKEN" \
           +local-env-ci \
diff --git a/.github/workflows/build-publish-contract-precompiles.yml b/.github/workflows/build-publish-contract-precompiles.yml
index 4ac5649ff..329e44c19 100644
--- a/.github/workflows/build-publish-contract-precompiles.yml
+++ b/.github/workflows/build-publish-contract-precompiles.yml
@@ -32,7 +32,7 @@ jobs:
     env:
       FORCE_COLOR: 1
     steps:
-      # Install Earthly
+      # Install EarthBuild
       - uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
           version: v0.8.17
@@ -59,8 +59,8 @@ jobs:
           username: MidnightCI
           password: ${{ secrets.MIDNIGHTCI_PACKAGES_WRITE }}
 
-      # Run Earthly build with platform-specific flags
-      - name: Run Earthly build for linux/${{ matrix.platform }}
+      # Run EarthBuild with platform-specific flags
+      - name: Run EarthBuild for linux/${{ matrix.platform }}
         id: version
         env:
           PLATFORM: ${{ matrix.platform }}
@@ -70,7 +70,7 @@ jobs:
           echo "[net]" >> "$HOME"/.cargo/config
           echo "git-fetch-with-cli = true" >> "$HOME"/.cargo/config
 
-          . ./.envrc && earthly --platform="linux/$PLATFORM" --push +node-ci-image-single-platform
+          . ./.envrc && earth --platform="linux/$PLATFORM" --push +node-ci-image-single-platform
 
           RUST_VERSION=$(grep '^channel' rust-toolchain.toml | sed 's/.*"\(.*\)".*/\1/')
           COMPACTC_VERSION=$(cat COMPACTC_VERSION)
diff --git a/.github/workflows/build-publish-partnerchains-dev.yml b/.github/workflows/build-publish-partnerchains-dev.yml
index 3e4a5b6a8..5ebb4f9b5 100644
--- a/.github/workflows/build-publish-partnerchains-dev.yml
+++ b/.github/workflows/build-publish-partnerchains-dev.yml
@@ -43,4 +43,4 @@ jobs:
           echo "[net]" >> "$HOME"/.cargo/config
           echo "git-fetch-with-cli = true" >> "$HOME"/.cargo/config
 
-          . ./.envrc && earthly --ci --push +partnerchains-dev
+          . ./.envrc && earth --ci --push +partnerchains-dev
diff --git a/.github/workflows/continuous-integration-checks.yml b/.github/workflows/continuous-integration-checks.yml
index 427a4904a..b1846acfa 100644
--- a/.github/workflows/continuous-integration-checks.yml
+++ b/.github/workflows/continuous-integration-checks.yml
@@ -57,7 +57,7 @@ jobs:
       - name: Run build
         if: steps.guard.outputs.hit != 'true'
         run: |
-          . ./.envrc && earthly --ci +check
+          . ./.envrc && earth --ci +check
 
       - uses: ./.github/actions/tree-cache-guard/save
         if: steps.guard.outputs.hit != 'true'
@@ -102,7 +102,7 @@ jobs:
       - name: Run feature unification check
         if: steps.guard.outputs.hit != 'true'
         run: |
-          . ./.envrc && earthly --ci +check-feature-unification
+          . ./.envrc && earth --ci +check-feature-unification
 
       - uses: ./.github/actions/tree-cache-guard/save
         if: steps.guard.outputs.hit != 'true'
diff --git a/.github/workflows/continuous-integration-test.yml b/.github/workflows/continuous-integration-test.yml
index 56b163e7a..5e41f7f62 100644
--- a/.github/workflows/continuous-integration-test.yml
+++ b/.github/workflows/continuous-integration-test.yml
@@ -93,7 +93,7 @@ jobs:
             exit 1
           fi
           echo "Using CACHE_KEY=$CACHE_KEY"
-          . ./.envrc && earthly -P \
+          . ./.envrc && earth -P \
             --secret GITHUB_TOKEN="$GITHUB_TOKEN" \
             --secret DOCKERHUB_USER="$DOCKERHUB_USER" \
             --secret DOCKERHUB_TOKEN="$DOCKERHUB_TOKEN" \
diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
index 97d0d39c0..103e41439 100644
--- a/.github/workflows/continuous-integration.yml
+++ b/.github/workflows/continuous-integration.yml
@@ -65,12 +65,12 @@ jobs:
         id: get_sha
         run: echo "sha=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT"
 
-      # TEST ONLY — let earthly manage its own buildkitd on the self-hosted
-      # runner, but without TLS (no certs are provisioned). Earthly defaults
+      # TEST ONLY — let EarthBuild manage its own buildkitd on the self-hosted
+      # runner, but without TLS (no certs are provisioned). EarthBuild defaults
       # to TLS for its managed buildkitd, which fails on a fresh runner.
       # Appending `tls_enabled: false` to the repo's existing .earthly/config.yml
-      # keeps the rest of midnight-node's earthly settings intact.
-      - name: Disable earthly TLS (self-hosted runner has no certs)
+      # keeps the rest of midnight-node's EarthBuild settings intact.
+      - name: Disable EarthBuild TLS (self-hosted runner has no certs)
         run: |
           echo "    tls_enabled: false" >> .earthly/config.yml
           echo "--- updated .earthly/config.yml ---"
@@ -171,11 +171,11 @@ jobs:
           echo "[net]" >> "$HOME"/.cargo/config
           echo "git-fetch-with-cli = true" >> "$HOME"/.cargo/config
 
-          # Retry the earthly invocation up to 3 times. Buildkit's default
+          # Retry the EarthBuild invocation up to 3 times. Buildkit's default
           # response-header timeout for registry uploads (~30s in the
           # underlying containerd resolver) isn't tunable via buildkitd.toml,
           # and the self-hosted -> ghcr.io path occasionally drops a layer push
-          # with "timeout awaiting response headers". Earthly's cache means
+          # with "timeout awaiting response headers". EaEarthBuild's cache means
           # retries skip everything that already succeeded — they essentially
           # only retry the failing push.
           #
@@ -183,17 +183,17 @@ jobs:
           # the GHA log, not collapsed.
           . ./.envrc
           for attempt in 1 2 3; do
-            echo "----- earthly attempt $attempt/3 -----"
-            if earthly --secret GITHUB_TOKEN="$GITHUB_TOKEN" -P --push +images; then
+            echo "----- EarthBuild attempt $attempt/3 -----"
+            if earth --secret GITHUB_TOKEN="$GITHUB_TOKEN" -P --push +images; then
               exit 0
             fi
-            echo "----- earthly attempt $attempt failed -----"
+            echo "----- EarthBuild attempt $attempt failed -----"
             if [ $attempt -lt 3 ]; then
               echo "sleeping 30s before retry"
               sleep 30
             fi
           done
-          echo "earthly failed after 3 attempts"
+          echo "EarthBuild failed after 3 attempts"
           exit 1
 
       - name: Upload build artifacts
@@ -302,7 +302,7 @@ jobs:
           echo "[net]" >> "$HOME"/.cargo/config
           echo "git-fetch-with-cli = true" >> "$HOME"/.cargo/config
 
-          . ./.envrc && earthly --secret GITHUB_TOKEN="$GITHUB_TOKEN" -P --push +images
+          . ./.envrc && earth --secret GITHUB_TOKEN="$GITHUB_TOKEN" -P --push +images
 
       - name: Upload build artifacts
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
@@ -416,7 +416,7 @@ jobs:
           echo "[net]" >> "$HOME"/.cargo/config
           echo "git-fetch-with-cli = true" >> "$HOME"/.cargo/config
 
-          . ./.envrc && earthly +check-deps
+          . ./.envrc && earth +check-deps
 
       - uses: ./.github/actions/tree-cache-guard/save
         if: steps.guard.outputs.hit != 'true'
@@ -476,7 +476,7 @@ jobs:
           echo "[net]" >> "$HOME"/.cargo/config
           echo "git-fetch-with-cli = true" >> "$HOME"/.cargo/config
 
-          . ./.envrc && earthly --secret GITHUB_TOKEN="$GITHUB_TOKEN" \
+          . ./.envrc && earth --secret GITHUB_TOKEN="$GITHUB_TOKEN" \
             --build-arg "NODE_IMAGE=ghcr.io/midnight-ntwrk/midnight-node:${{ needs.run.outputs.node_image_tag }}" \
             --build-arg "TOOLKIT_IMAGE=ghcr.io/midnight-ntwrk/midnight-node-toolkit:${{ needs.run.outputs.toolkit_image_tag }}" \
             +rebuild-genesis
@@ -528,7 +528,7 @@ jobs:
             exit 1
           fi
           echo "Using CACHE_KEY=$CACHE_KEY"
-          . ./.envrc && earthly -P --strict \
+          . ./.envrc && earth -P --strict \
             +test-pallet-fixtures --CACHE_KEY="$CACHE_KEY"
 
       - uses: ./.github/actions/tree-cache-guard/save
@@ -581,7 +581,7 @@ jobs:
           password: ${{ secrets.MIDNIGHTCI_PACKAGES_WRITE }}
 
       # Earthfile FROMs midnightntwrk/midnight-node-ci and other docker.io
-      # images; earthly pushes inline cache back to those repos under --push,
+      # images; EarthBuild pushes inline cache back to those repos under --push,
       # which needs Docker Hub auth.
       # Non-fatal: pushes target ghcr.io and the docker.io base images are
       # public, so the build proceeds without these creds (e.g. Dependabot runs,
@@ -598,11 +598,11 @@ jobs:
         if: steps.guard.outputs.hit != 'true' && runner.environment != 'self-hosted'
         run: scripts/free-disk-space.sh
 
-      # Self-hosted-runner-specific: earthly's managed buildkitd defaults to TLS
+      # Self-hosted-runner-specific: EarthBuild's managed buildkitd defaults to TLS
       # but no certs are provisioned on the runner. Append tls_enabled: false
-      # to the workspace .earthly/config.yml so earthly skips TLS for its own
+      # to the workspace .earthly/config.yml so EarthBuild skips TLS for its own
       # buildkitd container.
-      - name: Disable earthly TLS (self-hosted runner has no certs)
+      - name: Disable EarthBuildEarthBuild TLS (self-hosted runner has no certs)
         if: steps.guard.outputs.hit != 'true'
         run: |
           echo "    tls_enabled: false" >> .earthly/config.yml
@@ -617,7 +617,7 @@ jobs:
           DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_MIDNIGHTNTWRK_TOKEN }}
           EVENT_NAME: ${{ github.event_name }}
           # Self-hosted-runner-specific: runner systemd unit has PrivateTmp=true.
-          # Force earthly's tempdir to live under $RUNNER_TEMP which is
+          # Force EarthBuild's tempdir to live under $RUNNER_TEMP which is
           # outside the per-service PrivateTmp namespace.
           TMPDIR: ${{ runner.temp }}
           # Force-clear in case a runner process has stale EARTHLY_REMOTE_CACHE
@@ -625,7 +625,7 @@ jobs:
           EARTHLY_REMOTE_CACHE: ""
           # The runner's .env redirects ACTIONS_CACHE_URL to a local cache
           # server. Earthly auto-detects this and tries to push to it with the
-          # wrong auth; override to empty for the earthly call.
+          # wrong auth; override to empty for the EarthBuild call.
           ACTIONS_CACHE_URL: ""
           ACTIONS_RUNTIME_URL: ""
           # +test-toolkit pulls in +build-test-toolkit's `target-${CACHE_KEY}`
@@ -645,7 +645,7 @@ jobs:
             exit 1
           fi
           echo "Using CACHE_KEY=$CACHE_KEY"
-          . ./.envrc && earthly --secret GITHUB_TOKEN="$GITHUB_TOKEN" \
+          . ./.envrc && earth --secret GITHUB_TOKEN="$GITHUB_TOKEN" \
             --secret DOCKERHUB_USER="$DOCKERHUB_USER" \
             --secret DOCKERHUB_TOKEN="$DOCKERHUB_TOKEN" \
             -P --strict $PUSH_FLAG \
@@ -823,7 +823,7 @@ jobs:
       - name: Run metadata check
         if: steps.guard.outputs.hit != 'true'
         run: |
-          . ./.envrc && earthly --ci -P \
+          . ./.envrc && earth --ci -P \
             --build-arg "NODE_IMAGE=ghcr.io/midnight-ntwrk/midnight-node:${{ needs.run.outputs.node_image_tag }}" \
             +check-metadata
       - uses: ./.github/actions/tree-cache-guard/save
@@ -1115,12 +1115,12 @@ jobs:
     # Fork PRs run on ubuntu-latest, not the self-hosted pool: untrusted PR code is kept
     # off our own infrastructure. Same-repo PRs and push/merge_group keep self-hosted.
     runs-on: ${{ (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name != github.repository) && fromJSON('["ubuntu-latest"]') || fromJSON('["self-hosted", "tier:medium"]') }}
-    # No concurrency group: the local-env stack now runs INSIDE earthly's nested dockerd
+    # No concurrency group: the local-env stack now runs INSIDE EarthBuild's nested dockerd
     # (+local-env-ci), which gives each invocation its own network namespace. The stack
     # no longer binds fixed host ports (1442/1337/8088/4222/5432/30000/32000/9933-9944),
     # so concurrent PRs on the same self-hosted host can't collide — the repo-wide
     # `local-environment-tests-self-hosted` serialization is gone. Concurrency is now
-    # RAM-bounded (the shared buildkit/RAM pool), which earthly queues, not hard-serialized.
+    # RAM-bounded (the shared buildkit/RAM pool), which EarthBuild queues, not hard-serialized.
     permissions:
       pull-requests: write
       packages: read
@@ -1138,7 +1138,7 @@ jobs:
       # Isolate docker config per job — see the matching step in the `run` job.
       # This job runs concurrently, so per-job isolation matters: multiple
       # instances log in at once and would otherwise clobber each other's docker
-      # auth. Inherited by the composite action's docker login and earthly --pull.
+      # auth. Inherited by the composite action's docker login and EarthBuild --pull.
       - name: Isolate docker config
         if: steps.guard.outputs.hit != 'true'
         run: |
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index c27eca014..894fc7453 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -103,9 +103,9 @@ jobs:
           IMAGE_TAG: ${{ steps.check-images.outputs.IMAGE_TAG }}
         run: |
           echo "Images already exist for ${IMAGE_TAG}-amd64, skipping build"
-          . ./.envrc && earthly +extract-node-artifacts \
+          . ./.envrc && earth +extract-node-artifacts \
             --NODE_IMAGE="ghcr.io/midnight-ntwrk/midnight-node:${IMAGE_TAG}-amd64"
-          . ./.envrc && earthly +extract-toolkit-artifacts \
+          . ./.envrc && earth +extract-toolkit-artifacts \
             --TOOLKIT_IMAGE="ghcr.io/midnight-ntwrk/midnight-node-toolkit:${IMAGE_TAG}-amd64"
 
       - name: Free disk space
@@ -126,8 +126,8 @@ jobs:
 
           # We don't use --ci as we want artifacts to be saved
           # AND we can't use --strict or --ci because we're using LOCALLY in both +node-image and +toolkit-image
-          . ./.envrc && earthly -P --use-inline-cache --save-inline-cache --push +node-image
-          . ./.envrc && earthly --secret GITHUB_TOKEN="$GITHUB_TOKEN" -P --push +toolkit-image
+          . ./.envrc && earth -P --use-inline-cache --save-inline-cache --push +node-image
+          . ./.envrc && earth --secret GITHUB_TOKEN="$GITHUB_TOKEN" -P --push +toolkit-image
 
       - name: Get image digests
         id: digests
@@ -300,9 +300,9 @@ jobs:
           IMAGE_TAG: ${{ steps.check-images.outputs.IMAGE_TAG }}
         run: |
           echo "Images already exist for ${IMAGE_TAG}-arm64, skipping build"
-          . ./.envrc && earthly +extract-node-artifacts \
+          . ./.envrc && earth +extract-node-artifacts \
             --NODE_IMAGE="ghcr.io/midnight-ntwrk/midnight-node:${IMAGE_TAG}-arm64"
-          . ./.envrc && earthly +extract-toolkit-artifacts \
+          . ./.envrc && earth +extract-toolkit-artifacts \
             --TOOLKIT_IMAGE="ghcr.io/midnight-ntwrk/midnight-node-toolkit:${IMAGE_TAG}-arm64"
 
       - name: Run Node and toolkit builds
@@ -314,8 +314,8 @@ jobs:
           echo "[net]" >> "$HOME"/.cargo/config
           echo "git-fetch-with-cli = true" >> "$HOME"/.cargo/config
 
-          . ./.envrc && earthly -P --use-inline-cache --save-inline-cache --push +node-image
-          . ./.envrc && earthly --secret GITHUB_TOKEN="$GITHUB_TOKEN" -P --push +toolkit-image
+          . ./.envrc && earth -P --use-inline-cache --save-inline-cache --push +node-image
+          . ./.envrc && earth --secret GITHUB_TOKEN="$GITHUB_TOKEN" -P --push +toolkit-image
 
       - name: Get image digests
         id: digests
@@ -544,7 +544,7 @@ jobs:
         env:
           IMAGE_TAG: ${{ needs.publish-amd64.outputs.IMAGE_TAG }}
         run: |
-          # Needed only for older branches where Earthly is not pushing to midnightntwrk
+          # Needed only for older branches where EartEarthBuildhly is not pushing to midnightntwrk
           for IMAGE in midnight-node midnight-node-toolkit; do
             for ARCH in amd64 arm64; do
               SRC="ghcr.io/midnight-ntwrk/${IMAGE}:${IMAGE_TAG}-${ARCH}"
@@ -565,7 +565,7 @@ jobs:
           IMAGE_TAG: ${{ needs.publish-amd64.outputs.IMAGE_TAG }}
         run: |
           for IMAGE in midnight-node midnight-node-toolkit; do
-            # Arch-specific images already pushed by Earthly; create multi-arch manifest
+            # Arch-specific images already pushed by EarthBuild; create multi-arch manifest
             docker buildx imagetools create \
               --tag "ghcr.io/midnightntwrk/${IMAGE}:${IMAGE_TAG}" \
               "ghcr.io/midnightntwrk/${IMAGE}:${IMAGE_TAG}-amd64" \
diff --git a/.github/workflows/nightly-build-check.yml b/.github/workflows/nightly-build-check.yml
index ece6f0c92..de3a5b3a5 100644
--- a/.github/workflows/nightly-build-check.yml
+++ b/.github/workflows/nightly-build-check.yml
@@ -42,4 +42,4 @@ jobs:
           echo "[net]" >> "$HOME"/.cargo/config
           echo "git-fetch-with-cli = true" >> "$HOME"/.cargo/config
 
-          . ./.envrc && earthly -P --ci --platform=linux/amd64 +node-image
+          . ./.envrc && earth -P --ci --platform=linux/amd64 +node-image
diff --git a/.github/workflows/rebuild-chainspec-bot.yml b/.github/workflows/rebuild-chainspec-bot.yml
index a16bca257..9c6fc5a05 100644
--- a/.github/workflows/rebuild-chainspec-bot.yml
+++ b/.github/workflows/rebuild-chainspec-bot.yml
@@ -12,7 +12,7 @@ on:
         description: 'Space-separated network names (e.g., "qanet preview")'
         required: true
       version:
-        description: 'Optional node image version (e.g., "0.22.0") — sets --NODE_IMAGE on earthly'
+        description: 'Optional node image version (e.g., "0.22.0") — sets --NODE_IMAGE on EarthBuild'
         required: false
 
 jobs:
@@ -129,7 +129,7 @@ jobs:
             fi
           done
 
-      - name: Setup Earthly
+      - name: Setup EarthBuild
         uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
           version: v0.8.17
@@ -159,10 +159,10 @@ jobs:
             echo "Using node image: $NODE_IMAGE"
           fi
 
-          # Split networks and run earthly for each
+          # Split networks and run EarthBuild for each
           for network in $NETWORKS; do
             echo "Rebuilding chainspec for network: $network"
-            earthly -P +rebuild-chainspec --NETWORK="$network" --NODE_IMAGE="$NODE_IMAGE"
+            earth -P +rebuild-chainspec --NETWORK="$network" --NODE_IMAGE="$NODE_IMAGE"
           done
 
       - name: Commit and push changes
diff --git a/.github/workflows/rebuild-metadata-bot.yml b/.github/workflows/rebuild-metadata-bot.yml
index 4a49b7302..902e455f1 100644
--- a/.github/workflows/rebuild-metadata-bot.yml
+++ b/.github/workflows/rebuild-metadata-bot.yml
@@ -83,7 +83,7 @@ jobs:
           token: ${{ secrets.GITHUB_TOKEN }}
           fetch-depth: 0
 
-      - name: Setup Earthly
+      - name: Setup EarthBuild
         uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
           version: v0.8.17
@@ -104,7 +104,7 @@ jobs:
           mkdir -p "$HOME"/.cargo
           echo "[net]" >> "$HOME"/.cargo/config
           echo "git-fetch-with-cli = true" >> "$HOME"/.cargo/config
-          earthly -P +rebuild-metadata
+          earth -P +rebuild-metadata
 
       - name: Commit and push changes
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
diff --git a/.github/workflows/security-audit-scan.yml b/.github/workflows/security-audit-scan.yml
index efa25c5ae..f9591a80a 100644
--- a/.github/workflows/security-audit-scan.yml
+++ b/.github/workflows/security-audit-scan.yml
@@ -43,7 +43,7 @@ jobs:
       - name: Run cargo deny
         if: steps.guard.outputs.hit != 'true'
         run: |
-          . ./.envrc && earthly --use-inline-cache --strict +audit-rust
+          . ./.envrc && earth --use-inline-cache --strict +audit-rust
 
       - name: Fix cargo-deny SARIF format
         if: steps.guard.outputs.hit != 'true' && hashFiles('scan_reports/cargo-deny.sarif') != ''
@@ -95,7 +95,7 @@ jobs:
       - name: Run npm audit
         if: steps.guard.outputs.hit != 'true'
         run: |
-          . ./.envrc && earthly --use-inline-cache --strict +audit-nodejs
+          . ./.envrc && earth --use-inline-cache --strict +audit-nodejs
 
       - name: Upload npm-audit-local-environment SARIF
         uses: github/codeql-action/upload-sarif@ce729e4d353d580e6cacd6a8cf2921b72e5e310a #codeql-bundle-v2.23.6
diff --git a/.github/workflows/srtool-build.yml b/.github/workflows/srtool-build.yml
index ee254a60a..606daec57 100644
--- a/.github/workflows/srtool-build.yml
+++ b/.github/workflows/srtool-build.yml
@@ -51,7 +51,7 @@ jobs:
           submodules: true
           ref: ${{ inputs.ref }}
 
-      - name: Setup Earthly
+      - name: Setup EarthBuild
         uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
         with:
           version: v0.8.17
@@ -60,7 +60,7 @@ jobs:
 
       - name: Run srtool build
         run: |
-          . ./.envrc && earthly +srtool-build
+          . ./.envrc && earth +srtool-build
 
       - name: Rename WASM assets with version
         if: inputs.runtime-tag-release != ''
diff --git a/partner-chains/.github/actions/tests/argocd-tests/action.yml b/partner-chains/.github/actions/tests/argocd-tests/action.yml
index 87cdd5890..83eff4f5f 100644
--- a/partner-chains/.github/actions/tests/argocd-tests/action.yml
+++ b/partner-chains/.github/actions/tests/argocd-tests/action.yml
@@ -75,12 +75,12 @@ runs:
         role-to-assume: ${{ env.AWS_ROLE_ARN_ }}
         aws-region: "eu-central-1"
 
-    - name: Setup earthly
-      uses: earthly/actions-setup@v1
+    - name: Setup EarthBuild
+      uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
       with:
         github-token: ${{ github.token }}
         use-cache: false
-        version: ^0.8.0
+        version: v0.8.17
 
     - name: Run Tests
       env:
@@ -91,7 +91,7 @@ runs:
         JOB_URL: "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
       run: |
         cd e2e-tests
-        earthly --secret AWS_SESSION_TOKEN="$AWS_SESSION_TOKEN" \
+        earth --secret AWS_SESSION_TOKEN="$AWS_SESSION_TOKEN" \
                 --secret AWS_ACCESS_KEY_ID="$AWS_ACCESS_KEY_ID" \
                 --secret AWS_SECRET_ACCESS_KEY="$AWS_SECRET_ACCESS_KEY" \
                 --secret SLACK_WEBHOOK_URL="$SLACK_WEBHOOK_URL" \
diff --git a/partner-chains/.github/workflows/e2e-tests.yml b/partner-chains/.github/workflows/e2e-tests.yml
index e6b4c9085..f2c25446a 100644
--- a/partner-chains/.github/workflows/e2e-tests.yml
+++ b/partner-chains/.github/workflows/e2e-tests.yml
@@ -78,12 +78,12 @@ jobs:
       run: |
         echo "REPORT_TO_XRAY=$([[ -n "$INPUT_PLAN" || -n "$INPUT_EXECUTION" ]] && echo true || echo false )" >> $GITHUB_ENV
 
-    - name: install earthly
-      uses: earthly/actions-setup@v1
+    - name: install EarthBuild
+      uses: EarthBuild/actions-setup@3eefe0d8a96e1ffbefb86e2bbf6542eec78cbccb
       with:
         github-token: ${{ github.token }}
         use-cache: true
-        version: ^0.7.0
+        version: v0.8.17
 
     - name: run
       env:
@@ -107,7 +107,7 @@ jobs:
         K8S_SA_TOKEN: ${{ secrets.K8S_SA_TOKEN }}
       run: |
         cd e2e-tests
-        earthly \
+        earth \
           --secret AWS_SESSION_TOKEN="$AWS_SESSION_TOKEN" \
           --secret AWS_ACCESS_KEY_ID="$AWS_ACCESS_KEY_ID" \
           --secret AWS_SECRET_ACCESS_KEY="$AWS_SECRET_ACCESS_KEY" \