diff --git a/MODULE.bazel.lock b/MODULE.bazel.lock
index 59b2463..203a352 100644
--- a/MODULE.bazel.lock
+++ b/MODULE.bazel.lock
@@ -11884,7 +11884,7 @@
     "@@rules_rust~//rust:extensions.bzl%rust": {
       "general": {
         "bzlTransitiveDigest": "MCIZIVafPwJx1oqD86yaqQ96fZHrnK4aqh6eJw8FKPI=",
-        "usagesDigest": "33pmeooYDAbqrHh9dAyocEIWrirAoxT9swN2BtwaizQ=",
+        "usagesDigest": "C/o4C+XNsJ1ZxAt90kj9xVmvOBJ7Iz6Jio1LFfplAP8=",
         "recordedFileInputs": {},
         "recordedDirentsInputs": {},
         "envVariables": {},
diff --git a/build/bazel/rust.MODULE.bazel b/build/bazel/rust.MODULE.bazel
index eeedb06..4d29efe 100644
--- a/build/bazel/rust.MODULE.bazel
+++ b/build/bazel/rust.MODULE.bazel
@@ -1,11 +1,11 @@
 rust = use_extension("@rules_rust//rust:extensions.bzl", "rust")
 rust.toolchain(
     edition = "2021",
+    extra_rustc_flags = ["-Clinker=rust-lld"],
     extra_target_triples = [
         "x86_64-unknown-uefi",
     ],
     versions = ["1.82.0"],
-    extra_rustc_flags = ["-Clinker=rust-lld"],
 )
 use_repo(rust, "rust_toolchains")
 
diff --git a/build/ci/jenkins-presubmit.groovy b/build/ci/jenkins-presubmit.groovy
index 3b9e719..4d85229 100644
--- a/build/ci/jenkins-presubmit.groovy
+++ b/build/ci/jenkins-presubmit.groovy
@@ -47,28 +47,29 @@
                         gerritCheck checks: ['jenkins:gazelle': 'RUNNING'], message: "Running on ${env.NODE_NAME}"
                         echo "Gerrit change: ${GERRIT_CHANGE_URL}"
                         sh "git clean -fdx -e '/bazel-*'"
-                        sh "JENKINS_NODE_COOKIE=dontKillMe tools/bazel --bazelrc=.bazelrc.ci mod deps --lockfile_mode=update"
+                        sh "JENKINS_NODE_COOKIE=dontKillMe tools/bazel --bazelrc=.bazelrc.ci mod tidy --lockfile_mode=update"
                         sh "JENKINS_NODE_COOKIE=dontKillMe tools/bazel --bazelrc=.bazelrc.ci run //:go -- mod tidy"
                         sh "JENKINS_NODE_COOKIE=dontKillMe tools/bazel --bazelrc=.bazelrc.ci run //:gazelle -- update"
-
-                        script {
-                            def diff = sh script: "git status --porcelain", returnStdout: true
-                            if (diff.trim() != "") {
-                                sh "git diff HEAD"
-                                error """
-                                    Unclean working directory after running gazelle.
-                                    Please run:
-
-                                       \$ bazel mod deps --lockfile_mode=update
-                                       \$ bazel run //:go -- mod tidy
-                                       \$ bazel run //:gazelle -- update
-
-                                    In your git checkout and amend the resulting diff to this changelist.
-                                """
-                            }
-                        }
                     }
                     post {
+                        always {
+                            script {
+                                def diff = sh script: "git status --porcelain", returnStdout: true
+                                if (diff.trim() != "") {
+                                    sh "git diff HEAD"
+                                    error """
+                                        Unclean working directory after running gazelle.
+                                        Please run:
+
+                                        \$ bazel mod tidy --lockfile_mode=update
+                                        \$ bazel run //:go -- mod tidy
+                                        \$ bazel run //:gazelle -- update
+
+                                        In your git checkout and amend the resulting diff to this changelist.
+                                    """
+                                }
+                            }
+                        }
                         success {
                             gerritCheck checks: ['jenkins:gazelle': 'SUCCESSFUL']
                         }