diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index f1804475..af386103 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -39,7 +39,7 @@ jobs:
         with:
           python-version: '3.14'
       - name: Install pinned linters (keep in sync with pyproject [dev])
-        run: pip install ruff==0.16.3 black==26.5.1
+        run: pip install ruff==0.16.4 black==26.5.1
       - name: Ruff
         run: ruff check diff_diff tests
       - name: Black
@@ -60,7 +60,7 @@ jobs:
       # The package itself is NOT installed (mypy analyzes source directly;
       # no maturin/Rust build ever enters this workflow).
       - name: Install mypy + runtime deps for their type stubs (pinned)
-        run: pip install mypy==2.3.0 numpy==2.4.5 pandas==3.0.3 scipy==1.17.1
+        run: pip install mypy==2.3.1 numpy==2.4.5 pandas==3.0.3 scipy==1.17.1
       - name: Mypy
         run: mypy diff_diff
 
diff --git a/pyproject.toml b/pyproject.toml
index 81528ef5..d1cc7c7c 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -65,8 +65,8 @@ dev = [
     # NOTE: black/mypy require Python >= 3.10 (dev tooling only; the library
     # floor stays 3.9).
     "black==26.5.1",
-    "ruff==0.16.3",
-    "mypy==2.3.0",
+    "ruff==0.16.4",
+    "mypy==2.3.1",
     "maturin>=1.4,<2.0",
     "matplotlib>=3.5",
     "nbmake>=1.5",