diff --git a/build-matter.sh b/build-matter.sh
index c1c421f2..9d186347 100755
--- a/build-matter.sh
+++ b/build-matter.sh
@@ -77,21 +77,21 @@ else
     mkdir -p ${BUILD_DIR}
 
     cd ${BUILD_DIR}
-    git clone \
-        --branch ${MATTER_REF} \
-        --depth 1 \
-        https://github.com/project-chip/connectedhomeip.git \
-        matter
-
+    # Fetch by ref so MATTER_REF may be a tag, branch, or commit SHA (git clone --branch rejects SHAs).
+    git init -q matter
     cd ${MATTER_BUILD_DIR}
+    git remote add origin https://github.com/project-chip/connectedhomeip.git
+    git fetch --depth 1 origin ${MATTER_REF}
+    git checkout -q FETCH_HEAD
+    MATTER_COMMIT=$(git rev-parse HEAD)
 
     ./scripts/checkout_submodules.py --shallow --platform linux
 
-    git am ${MY_DIR}/third_party/matter/barton-library/patches/*.patch || (git am --abort && git reset --hard ${MATTER_REF} && exit 1)
+    git am ${MY_DIR}/third_party/matter/barton-library/patches/*.patch || (git am --abort && git reset --hard ${MATTER_COMMIT} && exit 1)
     ${MY_DIR}/third_party/matter/barton-library/linux/build.sh -o ${MATTER_INSTALL_DIR} -c ${MATTER_CONF_DIR} ${BUILD_WITH_STACK_SMASH_PROTECTION} ${BUILD_WITH_SANITIZER} ${BUILD_WITH_MESSAGE_TRACING}
 
     cd ${MATTER_BUILD_DIR}
-    git reset --hard ${MATTER_REF}
+    git reset --hard ${MATTER_COMMIT}
 fi
 
 # Clean up
diff --git a/docker/Dockerfile b/docker/Dockerfile
index 37fcb27c..8c0a090e 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -285,8 +285,11 @@ ARG MATTER_REF
 SHELL ["/bin/bash", "-c"]
 RUN test -n "${MATTER_REF}" || (echo "Error: MATTER_REF build arg is required" >&2 && exit 1) && \
     cd /tmp && \
-    git clone --branch ${MATTER_REF} --depth 1 https://github.com/project-chip/connectedhomeip.git matter && \
+    git init -q matter && \
     cd matter && \
+    git remote add origin https://github.com/project-chip/connectedhomeip.git && \
+    git fetch --depth 1 origin ${MATTER_REF} && \
+    git checkout -q FETCH_HEAD && \
     ./scripts/checkout_submodules.py --shallow --platform linux && \
     ${APPLY_PATCHES_PATH} /tmp/patches/matter . && \
     export PKG_CONFIG_PATH=/usr/local/openssl/lib/pkgconfig:$PKG_CONFIG_PATH && \
diff --git a/docker/version b/docker/version
index e3d06964..6d28a11d 100644
--- a/docker/version
+++ b/docker/version
@@ -1 +1 @@
-2.15
+2.16
diff --git a/matter-version b/matter-version
index b314cb0c..2d8c880b 100644
--- a/matter-version
+++ b/matter-version
@@ -1 +1 @@
-v1.5.1.0
+41ddb15b08f30ea4d16c3306df0b5c4caa3a5845