diff --git a/Cargo.lock b/Cargo.lock
index 09806df9d..2cefc07b2 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1661,6 +1661,17 @@ dependencies = [
  "regex-syntax",
 ]
 
+[[package]]
+name = "fancy-regex"
+version = "0.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "476de73bddf2ef8490aa4ee8f1cf40b430bf1d56c48c22080e5186952cd580e6"
+dependencies = [
+ "bit-set 0.8.0",
+ "regex-automata",
+ "regex-syntax",
+]
+
 [[package]]
 name = "fastrand"
 version = "2.5.0"
@@ -1790,6 +1801,16 @@ dependencies = [
  "num",
 ]
 
+[[package]]
+name = "fraction"
+version = "0.17.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e246562084dde8ebbcc943b261c406ce4f68e5032ec28029a251a47d6a295500"
+dependencies = [
+ "num",
+ "num-bigint",
+]
+
 [[package]]
 name = "fs-err"
 version = "3.3.1"
@@ -2324,7 +2345,7 @@ dependencies = [
  "htmd",
  "ignore",
  "image",
- "jsonschema",
+ "jsonschema 0.52.1",
  "libc",
  "lru",
  "mimalloc",
@@ -2397,7 +2418,7 @@ name = "ghosty-workflow-js"
 version = "0.0.23"
 dependencies = [
  "async-trait",
- "jsonschema",
+ "jsonschema 0.52.1",
  "rquickjs",
  "serde",
  "serde_json",
@@ -3163,15 +3184,15 @@ dependencies = [
  "data-encoding",
  "email_address",
  "fancy-regex 0.18.0",
- "fraction",
+ "fraction 0.15.4",
  "getrandom 0.3.4",
  "idna",
  "itoa",
- "jsonschema-regex",
+ "jsonschema-regex 0.46.10",
  "num-cmp",
  "num-traits",
  "percent-encoding",
- "referencing",
+ "referencing 0.46.10",
  "regex",
  "serde",
  "serde_json",
@@ -3179,6 +3200,34 @@ dependencies = [
  "uuid-simd",
 ]
 
+[[package]]
+name = "jsonschema"
+version = "0.52.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93e842fa72fd1e50ca4676a527641c13f5ee0d423ac699bfe1cd2afa3a4fdbac"
+dependencies = [
+ "ahash",
+ "bytecount",
+ "data-encoding",
+ "email_address",
+ "fancy-regex 0.19.0",
+ "fraction 0.17.0",
+ "getrandom 0.3.4",
+ "itoa",
+ "jsonschema-regex 0.52.1",
+ "jsonschema-value",
+ "num-cmp",
+ "num-traits",
+ "percent-encoding",
+ "referencing 0.52.1",
+ "regex",
+ "serde",
+ "serde_json",
+ "strum",
+ "unicode-general-category",
+ "uuid-simd",
+]
+
 [[package]]
 name = "jsonschema-regex"
 version = "0.46.10"
@@ -3188,6 +3237,30 @@ dependencies = [
  "regex-syntax",
 ]
 
+[[package]]
+name = "jsonschema-regex"
+version = "0.52.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f5d90ea83fa606c96f0b4737ecedf1fa6b624272022edc42039565f8d8af0b78"
+dependencies = [
+ "regex-syntax",
+]
+
+[[package]]
+name = "jsonschema-value"
+version = "0.52.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da4ab4cbe58181a117d8c3582844ce20b07184319b51ba6d756596c1c451aebc"
+dependencies = [
+ "ahash",
+ "bytecount",
+ "fraction 0.17.0",
+ "num-cmp",
+ "num-traits",
+ "serde_json",
+ "zmij",
+]
+
 [[package]]
 name = "kasuari"
 version = "0.4.12"
@@ -4630,6 +4703,23 @@ dependencies = [
  "serde_json",
 ]
 
+[[package]]
+name = "referencing"
+version = "0.52.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d38a014525040cdc9893361b7419bcf1f43b7ba7055eabaf6d91d6b75caa8b3f"
+dependencies = [
+ "ahash",
+ "fluent-uri",
+ "getrandom 0.3.4",
+ "hashbrown 0.17.1",
+ "itoa",
+ "micromap",
+ "parking_lot",
+ "percent-encoding",
+ "serde_json",
+]
+
 [[package]]
 name = "regex"
 version = "1.13.1"
@@ -5143,7 +5233,7 @@ dependencies = [
  "crossterm",
  "include_dir",
  "indexmap 2.14.0",
- "jsonschema",
+ "jsonschema 0.46.10",
  "percent-encoding",
  "ratatui",
  "regex",
diff --git a/Cargo.toml b/Cargo.toml
index ad4ba4063..9560ff6ae 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -63,7 +63,7 @@ encoding_rs = "0.8.35"
 # Pinned to the jsonschema line schemaui 0.12 requires (^0.46) so the graph
 # carries one jsonschema/jsonschema-regex/referencing/fancy-regex stack.
 # Move both together when schemaui catches up (dependabot: keep in step).
-jsonschema = { version = "0.46", default-features = false }
+jsonschema = { version = "0.52", default-features = false }
 reqwest = { version = "0.13.1", default-features = false, features = ["json", "rustls-no-provider", "socks"] }
 # NOT "parallel": the Workflow VM stays single-threaded and bridges to the
 # multi-thread engine over channels (see crates/workflow-js).