diff --git a/packages/mergebot/package.json b/packages/mergebot/package.json
index 9913784ab2..46cc1f8549 100644
--- a/packages/mergebot/package.json
+++ b/packages/mergebot/package.json
@@ -44,7 +44,7 @@
     "esbuild": "^0.27.3",
     "jest-file-snapshot": "^0.7.0",
     "rimraf": "^6.1.3",
-    "seroval": "^1.5.0",
+    "seroval": "^1.5.3",
     "typescript": "^5.9.3"
   },
   "scripts": {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index b473eb1e40..7324a0a674 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -355,8 +355,8 @@ importers:
         specifier: ^6.1.3
         version: 6.1.3
       seroval:
-        specifier: ^1.5.0
-        version: 1.5.0
+        specifier: ^1.5.3
+        version: 1.5.3
       typescript:
         specifier: ^5.9.3
         version: 5.9.3
@@ -2097,6 +2097,7 @@ packages:
 
   '@ungap/structured-clone@1.3.0':
     resolution: {integrity: sha512-WmoN8qaIAo7WTYWbAZuG8PYEhn5fkz7dZrqTBZ7dtt//lL2Gwms1IcnQ5yHqjDfX8Ft5j4YzDM23f87zBfDe9g==}
+    deprecated: Potential CWE-502 - Update to 1.3.1 or higher
 
   '@unrs/resolver-binding-android-arm-eabi@1.11.1':
     resolution: {integrity: sha512-ppLRUgHVaGRWUx0R0Ut06Mjo9gBaBkg3v/8AxusGLhsIotbBLuRk51rAzqLC8gq6NyyAojEXglNjzf6R948DNw==}
@@ -4518,8 +4519,8 @@ packages:
   sentence-case@3.0.4:
     resolution: {integrity: sha512-8LS0JInaQMCRoQ7YUytAo/xUu5W2XnQxV2HI/6uM6U7CITS1RqPElr30V6uIqyMKM9lJGRVFy5/4CuzcixNYSg==}
 
-  seroval@1.5.0:
-    resolution: {integrity: sha512-OE4cvmJ1uSPrKorFIH9/w/Qwuvi/IMcGbv5RKgcJ/zjA/IohDLU6SVaxFN9FwajbP7nsX0dQqMDes1whk3y+yw==}
+  seroval@1.5.3:
+    resolution: {integrity: sha512-BXe0x4buEeYiIKaRUnth1WqCILQ3k4O67KP/B4pC3pVz0Mv2c96ngA9QDREUYxWY1sb2RZVRqwI9RcpVMyHCVw==}
     engines: {node: '>=10'}
 
   set-function-length@1.2.2:
@@ -10073,7 +10074,7 @@ snapshots:
       tslib: 2.6.3
       upper-case-first: 2.0.2
 
-  seroval@1.5.0: {}
+  seroval@1.5.3: {}
 
   set-function-length@1.2.2:
     dependencies: