diff --git a/Cargo.lock b/Cargo.lock
index a4b83d80..7c48c004 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4439,9 +4439,9 @@ dependencies = [
 
 [[package]]
 name = "serde_json"
-version = "1.0.135"
+version = "1.0.137"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2b0d7ba2887406110130a978386c4e1befb98c674b4fba677954e4db976630d9"
+checksum = "930cfb6e6abf99298aaad7d29abbef7a9999a9a8806a40088f55f0dcec03146b"
 dependencies = [
  "itoa",
  "memchr",
diff --git a/Cargo.toml b/Cargo.toml
index adde5525..44fa6b89 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -49,7 +49,7 @@ prometheus = "0.13.4"
 querystrong = "0.3.0"
 rand = "0.8.5"
 serde = { version = "1.0.217", features = ["derive"] }
-serde_json = "1.0.135"
+serde_json = "1.0.137"
 serde_path_to_error = "0.1.16"
 sha2 = "0.10.8"
 subtle = "2.6.1"
diff --git a/cli/Cargo.toml b/cli/Cargo.toml
index 923bf2ae..111bb811 100644
--- a/cli/Cargo.toml
+++ b/cli/Cargo.toml
@@ -38,7 +38,7 @@ time = { version = "0.3.37", features = [
     "serde-well-known",
     "local-offset",
 ] }
-serde_json = "1.0.135"
+serde_json = "1.0.137"
 serde_yaml = "0.9.34"
 env_logger = "0.11.6"
 colored = "3.0.0"
diff --git a/client/Cargo.toml b/client/Cargo.toml
index 72e711f0..a3e9af25 100644
--- a/client/Cargo.toml
+++ b/client/Cargo.toml
@@ -17,7 +17,7 @@ base64 = "0.22.1"
 email_address = "0.2.9"
 prio = "0.16"
 serde = { version = "1.0.217", features = ["derive"] }
-serde_json = "1.0.135"
+serde_json = "1.0.137"
 thiserror = "2.0.11"
 trillium-client = { version = "0.6.2", features = ["json"] }
 trillium-http = "0.3.14"
diff --git a/migration/Cargo.toml b/migration/Cargo.toml
index 4d029a68..bb39d4e3 100644
--- a/migration/Cargo.toml
+++ b/migration/Cargo.toml
@@ -13,7 +13,7 @@ path = "src/lib.rs"
 async-std = { version = "1", features = ["attributes", "tokio1"] }
 clap = { version = "4.5.26", features = ["env", "derive"] }
 sea-orm = "1.0.1"
-serde_json = "1.0.135"
+serde_json = "1.0.137"
 thiserror = "2.0.11"
 time = "0.3.37"
 tracing = "0.1.41"
diff --git a/test-support/Cargo.toml b/test-support/Cargo.toml
index b99620a2..e2877dad 100644
--- a/test-support/Cargo.toml
+++ b/test-support/Cargo.toml
@@ -12,7 +12,7 @@ trillium-macros = "0.0.6"
 trillium-testing = { version = "0.7.0", features = ["tokio"] }
 divviup-api.workspace = true
 serde = "1.0.217"
-serde_json = "1.0.135"
+serde_json = "1.0.137"
 thiserror = "2.0.11"
 tracing = "0.1.41"
 tracing-log = "0.2.0"