diff --git a/.github/workflows/ci-pnpm.yml b/.github/workflows/ci-pnpm.yml
index d452aec..d73a333 100644
--- a/.github/workflows/ci-pnpm.yml
+++ b/.github/workflows/ci-pnpm.yml
@@ -59,10 +59,13 @@ jobs:
       - if: inputs.toolchain-source == 'mise'
         uses: jdx/mise-action@3c2e0cf82a5b2e5249f0d3635a4d83d0ae861518 # v4.2.5
         with:
-          # Must move together: sha256 is for mise-v<version>-linux-x64.tar.zst
-          # (the asset mise-action downloads on ubuntu runners).
+          # Must move together: sha256 is the hash of the EXTRACTED mise
+          # binary (official SHASUMS entry for mise-v<version>-linux-x64,
+          # no extension) — mise-action verifies the binary it installs,
+          # NOT the tarball it downloads. linux-x64 only; this job hardcodes
+          # ubuntu-latest, so no per-OS hash map is needed.
           version: 2026.8.10
-          sha256: ccc3547c9ac00828f3794bfa6dfea39fbaac9b1dc8a84ed0f71df438304224bb
+          sha256: 1f5e8795d24073904ef20ba70c1250ad6389d8c5672226d152e0ed24909ba72f
           install: true
           cache: true