diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2690fc572b..9725b38a4d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,9 @@ Important changes to data models, configuration, and migrations between each
 AppEngine version, listed here to ease deployment and troubleshooting.
 
 ## Next Release (replace with git tag when deployed)
+ * Bump runtimeVersion to `2025.04.15`.
+ * Upgraded stable Flutter analysis SDK to `3.29.3`.
+ * Upgraded pana to `0.22.21`.
  * Note: after the release we should update the load balancer rules to also include the `/api/packages/<package>/feed.atom` URLs.
 
 ## `20250403t085600-all`
diff --git a/Dockerfile.worker b/Dockerfile.worker
index 459be83079..82628eb47f 100644
--- a/Dockerfile.worker
+++ b/Dockerfile.worker
@@ -26,7 +26,7 @@ RUN mkdir -p /home/worker/config/flutter-stable
 RUN XDG_CONFIG_HOME=/home/worker/config/dart-stable tool/setup-dart.sh /home/worker/dart/stable 3.7.2
 
 # Setup Flutter SDK into /home/worker/flutter/{stable,preview}/
-RUN XDG_CONFIG_HOME=/home/worker/config/flutter-stable tool/setup-flutter.sh /home/worker/flutter/stable 3.29.2
+RUN XDG_CONFIG_HOME=/home/worker/config/flutter-stable tool/setup-flutter.sh /home/worker/flutter/stable 3.29.3
 
 # Setup webp
 RUN tool/setup-webp.sh /home/worker/bin
diff --git a/app/lib/shared/versions.dart b/app/lib/shared/versions.dart
index aba85b82c3..7383a1247a 100644
--- a/app/lib/shared/versions.dart
+++ b/app/lib/shared/versions.dart
@@ -24,10 +24,10 @@ final RegExp runtimeVersionPattern = RegExp(r'^\d{4}\.\d{2}\.\d{2}$');
 /// when the version switch happens.
 const _acceptedRuntimeVersions = <String>[
   // The current [runtimeVersion].
-  '2025.04.01',
+  '2025.04.15',
   // Fallback runtime versions.
+  '2025.04.01',
   '2025.03.27',
-  '2025.03.18',
 ];
 
 /// Sets the current runtime versions.
@@ -63,7 +63,7 @@ bool shouldGCVersion(String version) =>
 // keep in-sync with SDK version in .mono_repo.yml and Dockerfile
 final String runtimeSdkVersion = '3.7.0';
 final String toolStableDartSdkVersion = '3.7.2';
-final String toolStableFlutterSdkVersion = '3.29.2';
+final String toolStableFlutterSdkVersion = '3.29.3';
 
 final semanticToolStableDartSdkVersion =
     Version.parse(toolStableDartSdkVersion);
diff --git a/app/pubspec.yaml b/app/pubspec.yaml
index aa3268a303..7b9340b14b 100644
--- a/app/pubspec.yaml
+++ b/app/pubspec.yaml
@@ -46,7 +46,7 @@ dependencies:
   watcher: ^1.0.0
   yaml: ^3.1.0
   # pana version to be pinned
-  pana: '0.22.20'
+  pana: '0.22.21'
   # 3rd-party packages with pinned versions
   mailer: '6.3.0'
   ulid: '2.0.1'
diff --git a/pkg/pub_worker/pubspec.yaml b/pkg/pub_worker/pubspec.yaml
index 230e2744e6..fc434124fa 100644
--- a/pkg/pub_worker/pubspec.yaml
+++ b/pkg/pub_worker/pubspec.yaml
@@ -10,7 +10,7 @@ dependencies:
   appengine: ^0.13.6
   json_annotation: ^4.3.0
   jsontool: ^2.0.0
-  pana: ^0.22.20
+  pana: ^0.22.21
   path: ^1.8.0
   lints: ^5.0.0 # required for pana
   meta: ^1.7.0
diff --git a/pubspec.lock b/pubspec.lock
index ae27ed15e0..3d5fc012b8 100644
--- a/pubspec.lock
+++ b/pubspec.lock
@@ -626,10 +626,10 @@ packages:
     dependency: transitive
     description:
       name: pana
-      sha256: "4bbeb13e05992b4c82f1902c5872d9c3dff6beca0f86cc843cc9e587f41d17b8"
+      sha256: "424b9e8523030e21ceeb9712a8b09c49e8e0e50d55845af70efd3238f6a73fa2"
       url: "https://pub.dev"
     source: hosted
-    version: "0.22.20"
+    version: "0.22.21"
   path:
     dependency: transitive
     description: