diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 8491e5e3f..421ebc8dc 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -379,7 +379,9 @@ jobs:
     if: github.repository_owner == 'aws'
     runs-on: ${{ matrix.os }}
     env:
-      CARGO_LAMBDA_VERSION: 0.15.0
+      # 1.9.2 bundles cargo-zigbuild 0.23.0, which drops the -Wl,--fix-cortex-a53-843419 that
+      # rustc now passes for aarch64 and zig rejects. 0.15.0 bundled 0.14.1, which did not.
+      CARGO_LAMBDA_VERSION: 1.9.2
     defaults:
       run:
         shell: bash
diff --git a/pyproject.toml b/pyproject.toml
index 4b1ec011e..0ca0f7540 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -9,7 +9,10 @@ select = [
   "PL", # pylint
   "I",  # isort
 ]
-ignore = ["PLR0913", "PLC0415"]
+# PLR0917 (too-many-positional-arguments) became stable in ruff 0.16, and "PL" selects it.
+# Ignored for the same reason as PLR0913: the builder and workflow constructors take their
+# arguments positionally by design.
+ignore = ["PLR0913", "PLR0917", "PLC0415"]
 
 [tool.ruff.lint.pylint]
 max-branches = 13
diff --git a/requirements/dev.txt b/requirements/dev.txt
index 8eb2eefaf..5ed1a142e 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -9,4 +9,4 @@ pyelftools~=0.32 # Used to verify the generated Go binary architecture in integr
 
 # formatter
 black==26.5.1
-ruff==0.15.11
+ruff==0.16.5