diff --git a/.github/workflows/container-image-worker-cd.yml b/.github/workflows/container-image-worker-cd.yml
index 6239dd21..e8ed819a 100644
--- a/.github/workflows/container-image-worker-cd.yml
+++ b/.github/workflows/container-image-worker-cd.yml
@@ -78,7 +78,7 @@ jobs:
                       # as the credential-refresh scheduler keeps rotating the
                       # ducklake_s3 secret.
                       httpfs: "v1.5.3-cred-refresh-write-retry"
-                      ducklake: "v1.0-posthog.5"
+                      ducklake: "v1.0-posthog.6"
                       # Stable repo hosts postgres_scanner for 1.5.3; nightly
                       # does not. See scripts/ducklake_version_matrix.sh
                       # commit history for the rationale on each row.
diff --git a/.github/workflows/e2e-mw-dev.yml b/.github/workflows/e2e-mw-dev.yml
index 92b42ca1..eb59596a 100644
--- a/.github/workflows/e2e-mw-dev.yml
+++ b/.github/workflows/e2e-mw-dev.yml
@@ -90,7 +90,7 @@ jobs:
       build-args: |
         DUCKDB_EXTENSION_VERSION=1.5.3
         HTTPFS_EXTENSION_TAG=v1.5.3-cred-refresh-write-retry
-        DUCKLAKE_EXTENSION_TAG=v1.0-posthog.5
+        DUCKLAKE_EXTENSION_TAG=v1.0-posthog.6
         DUCKDB_EXTENSION_REPOSITORY=https://extensions.duckdb.org
         POSTGRES_SCANNER_REPOSITORY=https://extensions.duckdb.org
     secrets:
diff --git a/.github/workflows/scenario-dev.yml b/.github/workflows/scenario-dev.yml
index 64fed2bc..0b770b90 100644
--- a/.github/workflows/scenario-dev.yml
+++ b/.github/workflows/scenario-dev.yml
@@ -48,7 +48,7 @@ jobs:
       build-args: |
         DUCKDB_EXTENSION_VERSION=1.5.3
         HTTPFS_EXTENSION_TAG=v1.5.3-cred-refresh-write-retry
-        DUCKLAKE_EXTENSION_TAG=v1.0-posthog.5
+        DUCKLAKE_EXTENSION_TAG=v1.0-posthog.6
         DUCKDB_EXTENSION_REPOSITORY=https://extensions.duckdb.org
         POSTGRES_SCANNER_REPOSITORY=https://extensions.duckdb.org
     secrets:
diff --git a/Dockerfile b/Dockerfile
index 0b66505d..4c690110 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -24,7 +24,7 @@ RUN go mod download
 ARG TARGETARCH
 ARG DUCKDB_EXTENSION_VERSION=1.5.3
 ARG HTTPFS_EXTENSION_TAG=v1.5.3-cred-refresh-write-retry
-ARG DUCKLAKE_EXTENSION_TAG=v1.0-posthog.5
+ARG DUCKLAKE_EXTENSION_TAG=v1.0-posthog.6
 ARG DUCKDB_EXTENSION_REPOSITORY=https://extensions.duckdb.org
 # Repository for postgres_scanner specifically. Defaults to the stable
 # extensions repo, overridable per-row in CI (e.g. legacy DuckDB versions
diff --git a/Dockerfile.worker b/Dockerfile.worker
index 55f6f7ab..ef9b890a 100644
--- a/Dockerfile.worker
+++ b/Dockerfile.worker
@@ -52,7 +52,7 @@ RUN go mod download
 # ran after the source COPY + build, so they re-fetched on every edit.)
 ARG DUCKDB_EXTENSION_VERSION=1.5.3
 ARG HTTPFS_EXTENSION_TAG=v1.5.3-cred-refresh-write-retry
-ARG DUCKLAKE_EXTENSION_TAG=v1.0-posthog.5
+ARG DUCKLAKE_EXTENSION_TAG=v1.0-posthog.6
 ARG DUCKDB_EXTENSION_REPOSITORY=https://extensions.duckdb.org
 # Repository for postgres_scanner specifically. Defaults to the stable
 # extensions repo, overridable per-row in CI (e.g. legacy DuckDB versions
diff --git a/tests/mw-dev/e2e/harness.sh b/tests/mw-dev/e2e/harness.sh
index b47018cf..0af49e04 100755
--- a/tests/mw-dev/e2e/harness.sh
+++ b/tests/mw-dev/e2e/harness.sh
@@ -111,9 +111,9 @@ READY_TIMEOUT="${READY_TIMEOUT:-1200}"
 
 # The bundled extensions MUST be the PostHog forks. These are the short commit
 # SHAs duckdb_extensions() reports for the tags the image pins
-# (DUCKLAKE_EXTENSION_TAG=v1.0-posthog.5, HTTPFS_EXTENSION_TAG=v1.5.3-cred-refresh-write-retry).
+# (DUCKLAKE_EXTENSION_TAG=v1.0-posthog.6, HTTPFS_EXTENSION_TAG=v1.5.3-cred-refresh-write-retry).
 # If the image accidentally ships upstream, the version differs and we fail.
-EXPECT_DUCKLAKE_SHA="40174368"
+EXPECT_DUCKLAKE_SHA="49ec0dc8"
 EXPECT_HTTPFS_SHA="0dac6fc"
 
 # duckling-example RDS — the shared external metadata store (same one the