diff --git a/.dagger/dagger.json b/.dagger/dagger.json
index 0f6a588..7dc29ab 100644
--- a/.dagger/dagger.json
+++ b/.dagger/dagger.json
@@ -1,6 +1,6 @@
 {
   "name": "envoke",
-  "engineVersion": "v0.21.7",
+  "engineVersion": "v0.21.8",
   "sdk": {
     "source": "go"
   }
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a00c38f..e599731 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,19 +20,19 @@ jobs:
           persist-credentials: false
       - uses: dagger/dagger-for-github@27b130bf0f79a7f6fbbbe0fbca6760dc9bb40a77 # v8.4.1
         with:
-          version: "0.21.7"
+          version: "v0.21.8"
           module: .dagger
           check: "true"
       - uses: dagger/dagger-for-github@27b130bf0f79a7f6fbbbe0fbca6760dc9bb40a77 # v8.4.1
         with:
-          version: "0.21.7"
+          version: "v0.21.8"
           module: .dagger
           call: --gh-auth-token=env://GITHUB_TOKEN zizmor
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - uses: dagger/dagger-for-github@27b130bf0f79a7f6fbbbe0fbca6760dc9bb40a77 # v8.4.1
         with:
-          version: "0.21.7"
+          version: "v0.21.8"
           module: .dagger
           call: --gh-auth-token=env://GITHUB_TOKEN actions-up
         env:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ce9813b..23a098e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -58,7 +58,7 @@ jobs:
           permission-contents: write
       - uses: dagger/dagger-for-github@27b130bf0f79a7f6fbbbe0fbca6760dc9bb40a77 # v8.4.1
         with:
-          version: "0.21.7"
+          version: "v0.21.8"
           module: .dagger
           # GITHUB_TOKEN (ambient, contents: write above) authenticates the
           # envoke release itself. ACTIONS_ID_TOKEN_REQUEST_URL/_TOKEN are