diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index b8b1208686..62b03e5a03 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -46,7 +46,7 @@ jobs:
       - name: Run ruff (Python linter and formatter)
         uses: astral-sh/ruff-action@0ce1b0bf8b818ef400413f810f8a11cdbda0034b # v4.0.0
         with:
-          version: "0.9.1"
+          version: "0.15.17"
           args: "format --check"
 
       - name: "task fmt: Python and Go formatting"
diff --git a/Taskfile.yml b/Taskfile.yml
index 33f2391b95..adc5164607 100644
--- a/Taskfile.yml
+++ b/Taskfile.yml
@@ -173,7 +173,7 @@ tasks:
       # Pinned to match the version used by the `ruff format --check` step in
       # .github/workflows/check.yml — newer ruff versions reformat files that
       # CI considers already formatted.
-      - "uvx ruff@0.9.1 format -n"
+      - "uvx ruff@0.15.17 format -n"
 
   # `golangci-lint fmt` walks the filesystem and doesn't typecheck, so it
   # formats files across all nested modules (tools/, bundle/internal/tf/codegen/)