diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e578655..a9f52f9 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -84,7 +84,7 @@ jobs:
           sudo apt-get install -y apptainer
           apptainer --version
       - name: Setup JDK + Scala CLI
-        uses: VirtusLab/scala-cli-setup@v1.15.0
+        uses: VirtusLab/scala-cli-setup@v1.16.0
         with: { jvm: 'temurin:21' }
       - name: Build image
         run: |
@@ -130,7 +130,7 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y apptainer
       - name: Setup JDK + Scala CLI
-        uses: VirtusLab/scala-cli-setup@v1.15.0
+        uses: VirtusLab/scala-cli-setup@v1.16.0
         with: { jvm: 'temurin:21' }
       # A chipdb is byte-identical on every platform, so one arch generates the set for both.
       - uses: actions/download-artifact@v8
@@ -213,7 +213,7 @@ jobs:
           if [ "${{ github.ref_type }}" = "tag" ]; then echo "tag=${{ github.ref_name }}" >> "$GITHUB_OUTPUT";
           else echo "tag=${{ inputs.version }}" >> "$GITHUB_OUTPUT"; fi
       - name: Setup JDK + Scala CLI
-        uses: VirtusLab/scala-cli-setup@v1.15.0
+        uses: VirtusLab/scala-cli-setup@v1.16.0
         with: { jvm: 'temurin:21' }
       # Rename the built sifs and chip databases to immutable, content-addressed asset names and
       # (re)generate the lockfile mapping each image+arch (and each chipdb part) to its sha256 +