diff --git a/Makefile b/Makefile
index 82f5d82f..d1e589bc 100644
--- a/Makefile
+++ b/Makefile
@@ -34,13 +34,13 @@ dev: $(NEEDS_VENV)
 lint: $(NEEDS_VENV)
 	. $(VENV_BIN)/activate && \
 		ruff format --check $(ALL_PY_SRCS) && \
-		ruff $(ALL_PY_SRCS) && \
+		ruff check $(ALL_PY_SRCS) && \
 		mypy $(PY_MODULE)
 
 .PHONY: reformat
 reformat: $(NEEDS_VENV)
 	. $(VENV_BIN)/activate && \
-		ruff --fix $(ALL_PY_SRCS) && \
+		ruff check --fix $(ALL_PY_SRCS) && \
 		ruff format $(ALL_PY_SRCS)
 
 .PHONY: edit
diff --git a/limbo/testcases/cve.py b/limbo/testcases/cve.py
index fde80b8e..86045e52 100644
--- a/limbo/testcases/cve.py
+++ b/limbo/testcases/cve.py
@@ -2,7 +2,6 @@
 Public CVE testcases.
 """
 
-
 from cryptography import x509
 from cryptography.hazmat.primitives import hashes
 from cryptography.hazmat.primitives.asymmetric import ec
diff --git a/limbo/testcases/rfc5280/eku.py b/limbo/testcases/rfc5280/eku.py
index aad35a20..d21be9f2 100644
--- a/limbo/testcases/rfc5280/eku.py
+++ b/limbo/testcases/rfc5280/eku.py
@@ -2,7 +2,6 @@
 RFC5280 Extended Key Usage (EKU) tests.
 """
 
-
 from cryptography import x509
 
 from limbo.assets import ext
diff --git a/limbo/testcases/rfc5280/san.py b/limbo/testcases/rfc5280/san.py
index d684ed4a..484ac0f2 100644
--- a/limbo/testcases/rfc5280/san.py
+++ b/limbo/testcases/rfc5280/san.py
@@ -2,7 +2,6 @@
 RFC 5280 Subject Alternative Name (SAN) testcases.
 """
 
-
 from cryptography import x509
 
 from limbo.assets import ext
diff --git a/limbo/testcases/rfc5280/validity.py b/limbo/testcases/rfc5280/validity.py
index 5973eeac..64ec6a39 100644
--- a/limbo/testcases/rfc5280/validity.py
+++ b/limbo/testcases/rfc5280/validity.py
@@ -2,7 +2,6 @@
 RFC 5280 validity testcases.
 """
 
-
 from datetime import datetime
 
 from limbo.testcases._core import Builder, testcase
diff --git a/pyproject.toml b/pyproject.toml
index c9297de3..b6691c06 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -26,7 +26,7 @@ requires-python = ">=3.11"
 lint = [
     # NOTE: ruff is under active development, so we pin conservatively here
     # and let Dependabot periodically perform this update.
-    "ruff < 0.2.3",
+    "ruff < 0.3.1",
     "mypy >= 1.0",
     "types-pyyaml",
     "types-pyOpenSSL",