diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 04192db..355cecd 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -14,7 +14,7 @@ repos:
     # convention any more: test_supply_chain_policy.py enforces it, because the
     # two drifted (v0.15.1 vs ruff==0.16.3) and the hook spent a release linting
     # with different rules than CI.
-    rev: v0.16.8
+    rev: v0.16.9
     hooks:
       - id: ruff
         name: ruff check (no fixes)
diff --git a/constraints.txt b/constraints.txt
index b18a7f0..56d573c 100644
--- a/constraints.txt
+++ b/constraints.txt
@@ -37,7 +37,7 @@ psycopg-binary==3.3.6
 
 # Developer and CI verification tools.
 pytest==9.1.1
-ruff==0.16.8
+ruff==0.16.9
 bandit==1.9.4
 pip-audit==2.10.1
 mypy==2.3.1