diff --git a/Cargo.lock b/Cargo.lock
index 05877647..63d258a7 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2533,9 +2533,9 @@ checksum = "388a1df253eca08550bef6c72392cfe7c30914bf41df5269b68cbd6ff8f570a3"
 
 [[package]]
 name = "serde"
-version = "1.0.152"
+version = "1.0.154"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bb7d1f0d3021d347a83e556fc4683dea2ea09d87bccdf88ff5c12545d89d5efb"
+checksum = "8cdd151213925e7f1ab45a9bbfb129316bd00799784b174b7cc7bcd16961c49e"
 dependencies = [
  "serde_derive",
 ]
@@ -2571,9 +2571,9 @@ dependencies = [
 
 [[package]]
 name = "serde_derive"
-version = "1.0.152"
+version = "1.0.154"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "af487d118eecd09402d70a5d72551860e788df87b464af30e5ea6a38c75c541e"
+checksum = "4fc80d722935453bcafdc2c9a73cd6fac4dc1938f0346035d84bf99fa9e33217"
 dependencies = [
  "proc-macro2",
  "quote",
diff --git a/air-interpreter/Cargo.toml b/air-interpreter/Cargo.toml
index 5c6631f2..8d2ba8e8 100644
--- a/air-interpreter/Cargo.toml
+++ b/air-interpreter/Cargo.toml
@@ -27,7 +27,7 @@ marine-rs-sdk = { version = "0.7.1", features = ["logger"] }
 wasm-bindgen = "=0.2.82"
 
 log = "0.4.17"
-serde = { version = "1.0.152", features = [ "derive", "rc" ] }
+serde = { version = "1.0.154", features = [ "derive", "rc" ] }
 serde_json = "1.0.94"
 tracing = "0.1.37"
 # exclude tracing-log feature that interferes with the log crate:
diff --git a/air/Cargo.toml b/air/Cargo.toml
index 84ab58b0..ab968868 100644
--- a/air/Cargo.toml
+++ b/air/Cargo.toml
@@ -27,7 +27,7 @@ air-trace-handler = { version = "0.1.1", path = "../crates/air-lib/trace-handler
 air-utils = { version = "0.1.0", path = "../crates/air-lib/utils" }
 polyplets = { version = "0.3.2", path = "../crates/air-lib/polyplets" }
 
-serde = { version = "1.0.152", features = [ "derive", "rc" ] }
+serde = { version = "1.0.154", features = [ "derive", "rc" ] }
 serde_json = "1.0.94"
 
 boolinator = "2.4.0"
diff --git a/avm/interface/Cargo.toml b/avm/interface/Cargo.toml
index b5bd0975..cd31221b 100644
--- a/avm/interface/Cargo.toml
+++ b/avm/interface/Cargo.toml
@@ -22,6 +22,6 @@ polyplets = { version = "0.3.2", path = "../../crates/air-lib/polyplets" }
 thiserror = "1.0.38"
 maplit = "1.0.2"
 serde_json = "1.0.94"
-serde = "1.0.152"
+serde = "1.0.154"
 log = "0.4.17"
 tracing = "0.1.37"
diff --git a/avm/server/Cargo.toml b/avm/server/Cargo.toml
index 80da54b6..95a6dce5 100644
--- a/avm/server/Cargo.toml
+++ b/avm/server/Cargo.toml
@@ -26,7 +26,7 @@ eyre = "0.6.8"
 thiserror = "1.0.38"
 maplit = "1.0.2"
 serde_json = "1.0.94"
-serde = "1.0.152"
+serde = "1.0.154"
 log = "0.4.17"
 parking_lot = "0.12.1"
 tracing = "0.1.37"
diff --git a/crates/air-lib/air-parser/Cargo.toml b/crates/air-lib/air-parser/Cargo.toml
index 55d87b19..86675060 100644
--- a/crates/air-lib/air-parser/Cargo.toml
+++ b/crates/air-lib/air-parser/Cargo.toml
@@ -23,7 +23,7 @@ codespan-reporting = "0.11.1"
 multimap = "0.8.3"
 
 # TODO: hide serde behind a feature
-serde = { version = "1.0.152", features = ["rc", "derive"] }
+serde = { version = "1.0.154", features = ["rc", "derive"] }
 serde_json = "1.0.94"
 
 itertools = "0.10.5"
diff --git a/crates/air-lib/interpreter-cid/Cargo.toml b/crates/air-lib/interpreter-cid/Cargo.toml
index 83a5989c..f3f22a47 100644
--- a/crates/air-lib/interpreter-cid/Cargo.toml
+++ b/crates/air-lib/interpreter-cid/Cargo.toml
@@ -13,5 +13,5 @@ categories = ["wasm"]
 [dependencies]
 cid = { version = "0.10.1", default-features = false, features = ["std"] }
 multihash = { version = "0.18.0", default-features = false, features = ["multihash-impl", "std", "sha2"] }
-serde = { version = "1.0.152", features = ["derive"] }
+serde = { version = "1.0.154", features = ["derive"] }
 serde_json = "1.0.94"
diff --git a/crates/air-lib/interpreter-data/Cargo.toml b/crates/air-lib/interpreter-data/Cargo.toml
index 2fd38d6a..f7c743a2 100644
--- a/crates/air-lib/interpreter-data/Cargo.toml
+++ b/crates/air-lib/interpreter-data/Cargo.toml
@@ -20,7 +20,7 @@ air-interpreter-interface = { version = "0.12.1", path = "../interpreter-interfa
 air-interpreter-cid = { version = "0.2.0", path = "../interpreter-cid" }
 polyplets = { version = "0.3.2", path = "../polyplets" }
 
-serde = {version = "1.0.152", features = ["derive", "rc"]}
+serde = {version = "1.0.154", features = ["derive", "rc"]}
 serde_json = "1.0.94"
 semver = { version = "1.0.16", features = ["serde"] }
 once_cell = "1.17.1"
diff --git a/crates/air-lib/interpreter-interface/Cargo.toml b/crates/air-lib/interpreter-interface/Cargo.toml
index cedcc7f2..6297a80c 100644
--- a/crates/air-lib/interpreter-interface/Cargo.toml
+++ b/crates/air-lib/interpreter-interface/Cargo.toml
@@ -18,7 +18,7 @@ path = "src/lib.rs"
 marine-rs-sdk = { version = "0.7.1", optional = true }
 fluence-it-types = { version = "0.3.2", optional = true }
 
-serde = "1.0.152"
+serde = "1.0.154"
 serde_json = "1.0.94"
 
 [features]
diff --git a/crates/air-lib/lambda/ast/Cargo.toml b/crates/air-lib/lambda/ast/Cargo.toml
index d4f85f35..f9e94fd4 100644
--- a/crates/air-lib/lambda/ast/Cargo.toml
+++ b/crates/air-lib/lambda/ast/Cargo.toml
@@ -17,5 +17,5 @@ path = "src/lib.rs"
 non-empty-vec = { version = "0.2.3", features = ["serde"] }
 itertools = "0.10.5"
 
-serde = { version = "1.0.152", features = ["rc", "derive"] }
+serde = { version = "1.0.154", features = ["rc", "derive"] }
 serde_json = "1.0.94"
diff --git a/crates/air-lib/lambda/parser/Cargo.toml b/crates/air-lib/lambda/parser/Cargo.toml
index deac85eb..06cd0a4e 100644
--- a/crates/air-lib/lambda/parser/Cargo.toml
+++ b/crates/air-lib/lambda/parser/Cargo.toml
@@ -26,7 +26,7 @@ codespan-reporting = "0.11.1"
 multimap = "0.8.3"
 
 # TODO: hide serde behind a feature
-serde = { version = "1.0.152", features = ["rc", "derive"] }
+serde = { version = "1.0.154", features = ["rc", "derive"] }
 serde_json = "1.0.94"
 
 itertools = "0.10.5"
diff --git a/crates/air-lib/polyplets/Cargo.toml b/crates/air-lib/polyplets/Cargo.toml
index 0492c069..a94e467e 100644
--- a/crates/air-lib/polyplets/Cargo.toml
+++ b/crates/air-lib/polyplets/Cargo.toml
@@ -18,4 +18,4 @@ path = "src/lib.rs"
 marine-macro = "0.7.1"
 marine-rs-sdk-main = "0.7.1"
 
-serde = { version = "1.0.152", features = ["rc", "derive"] }
+serde = { version = "1.0.154", features = ["rc", "derive"] }
diff --git a/crates/air-lib/test-utils/Cargo.toml b/crates/air-lib/test-utils/Cargo.toml
index 1c4ce550..2102ded1 100644
--- a/crates/air-lib/test-utils/Cargo.toml
+++ b/crates/air-lib/test-utils/Cargo.toml
@@ -27,7 +27,7 @@ object-pool = "0.5.4"
 once_cell = "1.17.1"
 semver = "1.0.16"
 serde_json = "1.0.94"
-serde = { version = "1.0.152", features = ["derive"] }
+serde = { version = "1.0.154", features = ["derive"] }
 
 [dev-dependencies]
 maplit = "1.0.2"
diff --git a/crates/data-store/Cargo.toml b/crates/data-store/Cargo.toml
index 5a3fce7a..866172ad 100644
--- a/crates/data-store/Cargo.toml
+++ b/crates/data-store/Cargo.toml
@@ -16,7 +16,7 @@ path = "src/lib.rs"
 
 [dependencies]
 avm-interface = { version = "0.28.2", path = "../../avm/interface"}
-serde = { version = "1.0.152", features = ["derive"] }
+serde = { version = "1.0.154", features = ["derive"] }
 serde_bytes = "0.11.9"
 
 [dev-dependencies]
diff --git a/junk/cidify/Cargo.toml b/junk/cidify/Cargo.toml
index 9c84c057..bd1160c6 100644
--- a/junk/cidify/Cargo.toml
+++ b/junk/cidify/Cargo.toml
@@ -6,5 +6,5 @@ edition = "2021"
 [dependencies]
 air-interpreter-cid = { version = "0.2.0", path = "../../crates/air-lib/interpreter-cid" }
 air-interpreter-data = { version = "0.6.0", path = "../../crates/air-lib/interpreter-data" }
-serde = { version = "1.0.152", features = ["derive"]}
+serde = { version = "1.0.154", features = ["derive"]}
 serde_json = "1.0.94"
diff --git a/tools/cli/air-trace/Cargo.toml b/tools/cli/air-trace/Cargo.toml
index 5857ddcc..aa748d6c 100644
--- a/tools/cli/air-trace/Cargo.toml
+++ b/tools/cli/air-trace/Cargo.toml
@@ -18,7 +18,7 @@ avm-interface = { version = "0.28.2", path = "../../../avm/interface" }
 anyhow = "1.0.69"
 clap = { version = "4.1.8", features = ["derive", "env"] }
 itertools = "0.10.5"
-serde = { version = "1.0.152", features = ["derive"] }
+serde = { version = "1.0.154", features = ["derive"] }
 serde_json = "1.0.94"
 tracing-subscriber = { version = "0.3.16", default-features = false, features = [ "env-filter", "json", "smallvec", "time", "fmt" ] }