diff --git a/tools/setup/install-shfmt b/tools/setup/install-shfmt
index a034746e80..37547c9b62 100755
--- a/tools/setup/install-shfmt
+++ b/tools/setup/install-shfmt
@@ -1,18 +1,18 @@
 #!/usr/bin/env bash
 set -eu
 
-version=3.3.0
+version=3.3.1
 arch="$(uname -m)"
 
 case $arch in
     "x86_64")
         binary="shfmt_v${version}_linux_amd64"
-        sha256=9ad8751cea92e0ffbfd6bb72208434f3a86e7319fd10b56def204c24ee1d9fde
+        sha256=0f73bf27219571bca7c5ef7d740d6ae72227e3995ffd88c7cb2b5712751538e2
         ;;
 
     "aarch64")
         binary="shfmt_v${version}_linux_arm64"
-        sha256=abf9bbc7027f5f5ba691bc48a55a2fc531c05ea88245ede989d67199687cadb5
+        sha256=65d09815bb0d5c5b3c49f4e815c4785bdbaf339f4bcd607cabfd9cd2868b5849
         ;;
 esac
 
diff --git a/version.py b/version.py
index 3f17f90ab5..0d8fc09c87 100644
--- a/version.py
+++ b/version.py
@@ -48,4 +48,4 @@ API_FEATURE_LEVEL = 93
 #   historical commits sharing the same major version, in which case a
 #   minor version bump suffices.
 
-PROVISION_VERSION = "154.2"
+PROVISION_VERSION = "154.3"