diff --git a/.github/workflows/mirror-tofu-apply.yml b/.github/workflows/mirror-tofu-apply.yml
index 95839aa9..a0ea1eba 100644
--- a/.github/workflows/mirror-tofu-apply.yml
+++ b/.github/workflows/mirror-tofu-apply.yml
@@ -53,7 +53,7 @@ jobs:
       - name: Install OpenTofu
         uses: opentofu/setup-opentofu@a1320f892987e89d278cc92dc5adc984fb93aca4 # v2.0.2
         with:
-          tofu_version: "v1.13.0"
+          tofu_version: "v1.13.1"
 
       - name: Init
         env:
diff --git a/.github/workflows/tower-tofu-apply.yml b/.github/workflows/tower-tofu-apply.yml
index 4dd7dd1e..9e7b4535 100644
--- a/.github/workflows/tower-tofu-apply.yml
+++ b/.github/workflows/tower-tofu-apply.yml
@@ -53,7 +53,7 @@ jobs:
       - name: Install OpenTofu
         uses: opentofu/setup-opentofu@a1320f892987e89d278cc92dc5adc984fb93aca4 # v2.0.2
         with:
-          tofu_version: "v1.13.0"
+          tofu_version: "v1.13.1"
 
       - name: Init
         env:
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index a6aed1db..419ed53c 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -112,7 +112,7 @@ jobs:
 
       - uses: opentofu/setup-opentofu@a1320f892987e89d278cc92dc5adc984fb93aca4 # v2.0.2
         with:
-          tofu_version: v1.13.0
+          tofu_version: v1.13.1
 
       # -backend=false skips the S3 backend entirely, so validate needs no OCI
       # credentials and no state access.
diff --git a/mirror/terraform/versions.tf b/mirror/terraform/versions.tf
index f970b6d6..45dcb217 100644
--- a/mirror/terraform/versions.tf
+++ b/mirror/terraform/versions.tf
@@ -1,5 +1,5 @@
 terraform {
-  required_version = "1.13.0"
+  required_version = "1.13.1"
 
   required_providers {
     oci = {
diff --git a/tower/terraform/versions.tf b/tower/terraform/versions.tf
index f970b6d6..45dcb217 100644
--- a/tower/terraform/versions.tf
+++ b/tower/terraform/versions.tf
@@ -1,5 +1,5 @@
 terraform {
-  required_version = "1.13.0"
+  required_version = "1.13.1"
 
   required_providers {
     oci = {