diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index ed13d1d..30e9132 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -30,14 +30,14 @@ jobs:
   # Real load validation: boots Home Assistant against the repo config and
   # proves HA can parse + set up every integration (yamllint only proves the
   # YAML parses; this catches unknown keys, bad Jinja, schema drift).
-  # Pinned to the HA version the box runs; HA 2026.8 needs python 3.13 and a
-  # glibc debian base (the runner mounts a glibc node for checkout — alpine
-  # cannot exec it, first CI run proved that in 12 seconds).
+  # Pinned to the HA version the box runs. HA 2026.8 requires python
+  # >=3.14.2 (pip refuses older), and the base must be glibc debian — the
+  # runner mounts a glibc node for checkout, alpine cannot exec it.
   # Stub secrets are CI-only fixtures — never present on the live box.
   config-check:
     runs-on: ultix
     container:
-      image: python:3.13-bookworm
+      image: python:3.14-bookworm
     steps:
       - uses: actions/checkout@v4
       - name: install homeassistant 2026.8.3