diff --git a/docker/sandbox/WORKSPACE b/docker/sandbox/WORKSPACE
index 3c4304d7..c86d20f7 100644
--- a/docker/sandbox/WORKSPACE
+++ b/docker/sandbox/WORKSPACE
@@ -2,7 +2,7 @@ load("@bazel_tools//tools/build_defs/repo:git.bzl", "git_repository")
 
 git_repository(
     name = "bazel_toolchains",
-    commit = "109dfdb8a8ffb47a45fa4b4dea58f0b21f708e70",  # Release 3.7.1
+    commit = "d23b9d7138943c8808ed6bd534bca89a393b2a6f",  # Release 3.7.1
     remote = "https://github.com/bazelbuild/bazel-toolchains.git",
 )