diff --git a/.ci/ruff.sh b/.ci/ruff.sh
index 2482b6f8..61f29bb6 100755
--- a/.ci/ruff.sh
+++ b/.ci/ruff.sh
@@ -5,7 +5,9 @@
 if [ "$(id -u)" = 0 ]; then
 	set -x
 	apk -q add py3-pip
-	pip install --break-system-packages --no-warn-script-location ruff
+	# pin to ruff 0.11.0 until this is fixed:
+	# https://github.com/astral-sh/ruff/issues/16874
+	pip install --break-system-packages --no-warn-script-location ruff==0.11.0
 	exec su "${TESTUSER:-build}" -c "sh -e $0"
 fi