diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ea240e4..50b2571 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -217,7 +217,11 @@ jobs:
           # never let the build itself reach a remote cache service. Same rule as the
           # sandboxed build in pr-build.yml and as the publish step below.
           LAKE_NO_CACHE: "true"
-        run: lake build
+        # `--iofail`, as in the sandboxed PR build (TauCetiTools' sandbox-build.sh): the build
+        # fails if any module, dependencies included, logs a warning or an info message. A plain
+        # `lake build` here let main stay green while every PR build failed on deprecation
+        # warnings in LML.
+        run: lake build --iofail
 
       # The same shared checks as trusted PR builds, compiled from merged main's sources.
       - name: Shared ownership and axiom audits
diff --git a/lake-manifest.json b/lake-manifest.json
index 735133d..5249f89 100644
--- a/lake-manifest.json
+++ b/lake-manifest.json
@@ -15,7 +15,7 @@
    "type": "git",
    "subDir": null,
    "scope": "",
-   "rev": "61cd177d7502d33e8bfb19fec79e25054effbe8c",
+   "rev": "efbe5d25120c34fd5c9aa3b8b6971b4f2d4028af",
    "name": "LeanMachineLearning",
    "manifestFile": "lake-manifest.json",
    "inputRev": "main",