diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5d5f644..d469ccd 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -35,7 +35,7 @@ jobs:
       uses: pypa/gh-action-pypi-publish@v1.9.0
 
     - name: sign
-      uses: sigstore/gh-action-sigstore-python@v2.1.1
+      uses: sigstore/gh-action-sigstore-python@v3.0.0
       with:
         inputs: ./dist/*.tar.gz ./dist/*.whl
         release-signing-artifacts: true
diff --git a/Makefile b/Makefile
index 057642f..9d725be 100644
--- a/Makefile
+++ b/Makefile
@@ -49,16 +49,15 @@ codegen: env/pyvenv.cfg
 lint: env/pyvenv.cfg
 	. env/bin/activate && \
 		ruff format --check $(ALL_PY_SRCS) && \
-		ruff $(ALL_PY_SRCS) && \
-		mypy $(PY_MODULE)
-		# TODO: re-enable once fixed on Python 3.12+
-		# interrogate -c pyproject.toml .
+		ruff check $(ALL_PY_SRCS) && \
+		mypy $(PY_MODULE) && \
+		interrogate -c pyproject.toml .
 
 .PHONY: reformat
 reformat:
 	. env/bin/activate && \
 		ruff format $(ALL_PY_SRCS) && \
-		ruff --fix $(ALL_PY_SRCS)
+		ruff check --fix $(ALL_PY_SRCS)
 
 .PHONY: test tests
 test tests: env/pyvenv.cfg
diff --git a/pyproject.toml b/pyproject.toml
index f53e347..20b97a2 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -63,4 +63,6 @@ exclude_dirs = ["./test"]
 
 [tool.ruff]
 line-length = 100
+
+[tool.ruff.lint]
 select = ["E", "F", "W", "UP", "I", "N", "YTT", "BLE", "C4", "SIM"]