diff --git a/CHANGELOG.md b/CHANGELOG.md
index 48e14059d2..c5102d9280 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,8 +2,9 @@ Important changes to data models, configuration, and migrations between each
 AppEngine version, listed here to ease deployment and troubleshooting.
 
 ## Next Release (replace with git tag when deployed)
- * Bump runtimeVersion to `2025.03.07`.
+ * Bump runtimeVersion to `2025.03.10`.
  * Upgraded stable Flutter analysis SDK to `3.29.1`.
+ * Upgraded pana to `0.22.19`.
 
 ## `20250306t114400-all`
  * Bump runtimeVersion to `2025.03.03`.
diff --git a/app/lib/shared/versions.dart b/app/lib/shared/versions.dart
index 954a3e2f2b..40847a29e5 100644
--- a/app/lib/shared/versions.dart
+++ b/app/lib/shared/versions.dart
@@ -24,7 +24,7 @@ final RegExp runtimeVersionPattern = RegExp(r'^\d{4}\.\d{2}\.\d{2}$');
 /// when the version switch happens.
 const _acceptedRuntimeVersions = <String>[
   // The current [runtimeVersion].
-  '2025.03.07',
+  '2025.03.10',
   // Fallback runtime versions.
   '2025.03.03',
   '2025.02.25',
diff --git a/app/pubspec.yaml b/app/pubspec.yaml
index 0daff722e2..219af50369 100644
--- a/app/pubspec.yaml
+++ b/app/pubspec.yaml
@@ -46,7 +46,7 @@ dependencies:
   watcher: ^1.0.0
   yaml: ^3.1.0
   # pana version to be pinned
-  pana: '0.22.18'
+  pana: '0.22.19'
   # 3rd-party packages with pinned versions
   mailer: '6.3.0'
   ulid: '2.0.1'
diff --git a/pkg/pub_worker/pubspec.yaml b/pkg/pub_worker/pubspec.yaml
index 9baca620d7..7a37231e61 100644
--- a/pkg/pub_worker/pubspec.yaml
+++ b/pkg/pub_worker/pubspec.yaml
@@ -10,7 +10,7 @@ dependencies:
   appengine: ^0.13.6
   json_annotation: ^4.3.0
   jsontool: ^2.0.0
-  pana: ^0.22.18
+  pana: ^0.22.19
   path: ^1.8.0
   lints: ^5.0.0 # required for pana
   meta: ^1.7.0
diff --git a/pubspec.lock b/pubspec.lock
index 6d7fe28e4b..a32f04e3fa 100644
--- a/pubspec.lock
+++ b/pubspec.lock
@@ -626,10 +626,10 @@ packages:
     dependency: transitive
     description:
       name: pana
-      sha256: "3bd9ca2adbfdb9a3ac0fc75039a1a007811826ade9bc05cf3a30b803812f99f8"
+      sha256: "2190c23df74361a9e7e2030ab96a7a2b5f05d301fe632a6a1a3153570c37c8a4"
       url: "https://pub.dev"
     source: hosted
-    version: "0.22.18"
+    version: "0.22.19"
   path:
     dependency: transitive
     description: