diff --git a/CHANGELOG.md b/CHANGELOG.md
index e6745cd..a8ed783 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,7 @@
 
 ### Fixed
 
+- Refresh bundled Chromium through Playwright 1.62.1, align the Kubernetes MLflow server with client 3.15.2, and require Pydantic 2.13.5 bug fixes.
 - Apply planned native reasoning effort to all four harnesses and resolve proxy, runner, and manifest precedence before proxy startup (#53, thanks @vincentkoc).
 - Rehydrate replacement native fleet leases instead of trusting stale bootstrap timestamps (#58, thanks @vincentkoc).
 - Separate native execution validity from diagnostic rewards, reject wholly invalid runs, and preserve terminal exit status in recovery archives (#63, thanks @vincentkoc).
diff --git a/Dockerfile b/Dockerfile
index 462d89a..9611d35 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -14,7 +14,7 @@ RUN apt-get update && \
 RUN ln -s /app /openclaw
 
 ENV PLAYWRIGHT_BROWSERS_PATH=/ms-playwright
-RUN cd /tmp && npx -y playwright@1.59.1 install --with-deps chromium && \
+RUN cd /tmp && npx -y playwright@1.62.1 install --with-deps chromium && \
     CHROME_PATH="$(find /ms-playwright -path '*/chrome' -type f | sort | head -n 1)" && \
     test -x "$CHROME_PATH" && \
     ln -sf "$CHROME_PATH" /usr/bin/chromium
diff --git a/Dockerfile.main b/Dockerfile.main
index b57508e..0964290 100644
--- a/Dockerfile.main
+++ b/Dockerfile.main
@@ -17,7 +17,7 @@ RUN apt-get update && \
 RUN ln -s /app /openclaw
 
 ENV PLAYWRIGHT_BROWSERS_PATH=/ms-playwright
-RUN npx -y playwright@1.59.1 install --with-deps chromium && \
+RUN npx -y playwright@1.62.1 install --with-deps chromium && \
     CHROME_PATH="$(find /ms-playwright -path '*/chrome' -type f | sort | head -n 1)" && \
     test -x "$CHROME_PATH" && \
     ln -sf "$CHROME_PATH" /usr/bin/chromium
diff --git a/docs/kubernetes.md b/docs/kubernetes.md
index 25f27c3..38755ef 100644
--- a/docs/kubernetes.md
+++ b/docs/kubernetes.md
@@ -62,7 +62,7 @@ Set these **before** running `deploy.sh`.
 | `MLFLOW_TRACKING_URI` | *(deployed by script)* | External MLflow URI — skips MLflow deploy if set |
 | `MLFLOW_EXPERIMENT_ID` | | MLflow experiment ID |
 | `MLFLOW_EXPERIMENT_NAME` | `clawbench` | MLflow experiment name |
-| `MLFLOW_IMAGE` | `ghcr.io/mlflow/mlflow:v3.14.0` | MLflow server image |
+| `MLFLOW_IMAGE` | `ghcr.io/mlflow/mlflow:v3.15.2` | MLflow server image |
 | `ANTHROPIC_API_KEY` | | Added to K8s secret if set |
 | `OPENROUTER_API_KEY` | | Added to K8s secret if set |
 | `GEMINI_API_KEY` | | Added to K8s secret if set |
diff --git a/pyproject.toml b/pyproject.toml
index 9fddedd..380e113 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -7,7 +7,7 @@ license = "MIT"
 requires-python = ">=3.11"
 dependencies = [
     "websockets>=17.1,<18",
-    "pydantic>=2.13.4,<3",
+    "pydantic>=2.13.5,<3",
     "pyyaml>=6.0.3,<7",
     "datasets>=5.0.1,<6",
     "gradio>=6.26.0,<7",
diff --git a/scripts/k8s/deploy.sh b/scripts/k8s/deploy.sh
index c8f3d2f..4ba02e6 100755
--- a/scripts/k8s/deploy.sh
+++ b/scripts/k8s/deploy.sh
@@ -29,7 +29,7 @@
 #   MLFLOW_TRACKING_URI            External MLflow URI (skips MLflow deploy if set)
 #   MLFLOW_EXPERIMENT_ID           MLflow experiment ID
 #   MLFLOW_EXPERIMENT_NAME         MLflow experiment name
-#   MLFLOW_IMAGE                   MLflow image (default: ghcr.io/mlflow/mlflow:v3.14.0)
+#   MLFLOW_IMAGE                   MLflow image (default: ghcr.io/mlflow/mlflow:v3.15.2)
 #   ANTHROPIC_API_KEY              Anthropic key (added to secret if set)
 #   OPENROUTER_API_KEY             OpenRouter key (added to secret if set)
 #   GEMINI_API_KEY                 Gemini key (added to secret if set)
@@ -40,7 +40,7 @@ NS="${CLAWBENCH_NAMESPACE:-}"
 MLFLOW_NS="${MLFLOW_NAMESPACE:-mlflow}"
 CLAWBENCH_IMG="${CLAWBENCH_IMAGE:-quay.io/sallyom/clawbench:latest}"
 OPENCLAW_IMG="${OPENCLAW_IMAGE:-ghcr.io/openclaw/openclaw:latest}"
-MLFLOW_IMG="${MLFLOW_IMAGE:-ghcr.io/mlflow/mlflow:v3.14.0}"
+MLFLOW_IMG="${MLFLOW_IMAGE:-ghcr.io/mlflow/mlflow:v3.15.2}"
 
 # ---------------------------------------------------------------------------
 if [[ "${1:-}" == "-h" || "${1:-}" == "--help" ]]; then
@@ -80,7 +80,7 @@ Optional environment:
   MLFLOW_TRACKING_URI          External MLflow URI (skips MLflow deploy)
   MLFLOW_EXPERIMENT_ID         MLflow experiment ID
   MLFLOW_EXPERIMENT_NAME       MLflow experiment name
-  MLFLOW_IMAGE                 MLflow image (default: ghcr.io/mlflow/mlflow:v3.14.0)
+  MLFLOW_IMAGE                 MLflow image (default: ghcr.io/mlflow/mlflow:v3.15.2)
   ANTHROPIC_API_KEY            Anthropic key (added to secret if set)
   OPENROUTER_API_KEY           OpenRouter key (added to secret if set)
   GEMINI_API_KEY               Gemini key (added to secret if set)
@@ -254,7 +254,7 @@ deploy_mlflow() {
   kubectl apply -f "$SCRIPT_DIR/mlflow/pvc.yaml" -n "$MLFLOW_NS"
   kubectl apply -f "$SCRIPT_DIR/mlflow/service.yaml" -n "$MLFLOW_NS"
 
-  if [[ "$MLFLOW_IMG" != "ghcr.io/mlflow/mlflow:v3.14.0" ]]; then
+  if [[ "$MLFLOW_IMG" != "ghcr.io/mlflow/mlflow:v3.15.2" ]]; then
     kubectl apply -f "$SCRIPT_DIR/mlflow/deployment.yaml" -n "$MLFLOW_NS"
     kubectl set image "deploy/mlflow" "mlflow=$MLFLOW_IMG" -n "$MLFLOW_NS"
   else
diff --git a/scripts/k8s/mlflow/deployment.yaml b/scripts/k8s/mlflow/deployment.yaml
index 129382a..49c4577 100644
--- a/scripts/k8s/mlflow/deployment.yaml
+++ b/scripts/k8s/mlflow/deployment.yaml
@@ -18,7 +18,7 @@ spec:
     spec:
       containers:
         - name: mlflow
-          image: ghcr.io/mlflow/mlflow:v3.14.0
+          image: ghcr.io/mlflow/mlflow:v3.15.2
           command:
             - mlflow
             - server