diff --git a/src/nixSupport/xce.nix b/src/nixSupport/xce.nix
index 65c47ed..63a4902 100644
--- a/src/nixSupport/xce.nix
+++ b/src/nixSupport/xce.nix
@@ -35,6 +35,17 @@ stdenv.mkDerivation {
     struct2json
     (capnpc.overrideAttrs (oldAttrs: {
       separateDebugInfo = true;
+      # bug-918: upstream xbuild's capnpc package.nix pins src to the
+      # MUTABLE `main` ref of shen390s/c-capnproto with a hardcoded sha256,
+      # so it hard-breaks (fixed-output hash mismatch) every time that
+      # branch moves. Pin to an immutable commit here instead so this repo
+      # stops depending on upstream's moving target.
+      src = pkgs.fetchFromGitHub {
+        owner = "shen390s";
+        repo = "c-capnproto";
+        rev = "e45ff682c4756ac5067cbac6d0f282a8ea5f0155";
+        sha256 = "sha256-9rTlcTia+s9ARGeTi+8auGvM0RkS+wZK7aIkzecaeSk=";
+      };
     }))
     which
     findutils