diff --git a/Cargo.lock b/Cargo.lock
index c1c3954..67f2472 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -740,9 +740,9 @@ dependencies = [
 
 [[package]]
 name = "cssparser"
-version = "0.36.0"
+version = "0.37.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dae61cf9c0abb83bd659dab65b7e4e38d8236824c85f0f804f173567bda257d2"
+checksum = "8c9cdaae01d5ed7882b04d795e7f752f46ff52d2fa3b50a20d28c464510bba98"
 dependencies = [
  "cssparser-macros",
  "dtoa-short",
@@ -753,9 +753,9 @@ dependencies = [
 
 [[package]]
 name = "cssparser-macros"
-version = "0.6.1"
+version = "0.7.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "13b588ba4ac1a99f7f2964d24b3d896ddc6bf847ee3855dbd4366f058cfcd331"
+checksum = "10a2a99df6e410a8ff4245aa2006499ea662245f967cc7c0a38c83ef8eb44dbf"
 dependencies = [
  "quote",
  "syn",
@@ -2922,9 +2922,9 @@ checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
 
 [[package]]
 name = "scraper"
-version = "0.26.0"
+version = "0.27.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f0f5297102b8b62b4454ee8561601b2d551b4913148feb4241ca9d1a04bf4526"
+checksum = "bdd0be4d296f048bfb06dd01bbc80ef789ddd2e55583e8d2e6b804942abfabc2"
 dependencies = [
  "cssparser",
  "ego-tree",
@@ -2966,9 +2966,9 @@ dependencies = [
 
 [[package]]
 name = "selectors"
-version = "0.36.1"
+version = "0.38.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c5d9c0c92a92d33f08817311cf3f2c29a3538a8240e94a6a3c622ce652d7e00c"
+checksum = "8adfa1c298912827b8a28b223b3b874357397ae706e6190acd9bf28cee99114d"
 dependencies = [
  "bitflags",
  "cssparser",
diff --git a/crates/plumb-cdp/Cargo.toml b/crates/plumb-cdp/Cargo.toml
index 6d554e7..0e7d2ba 100644
--- a/crates/plumb-cdp/Cargo.toml
+++ b/crates/plumb-cdp/Cargo.toml
@@ -55,7 +55,7 @@ url = { workspace = true }
 # Pure: no I/O, no script execution, no resource fetching. The
 # `deterministic` feature pins internal hash-map iteration so byte-stable
 # output holds across runs.
-scraper = { version = "0.26", default-features = false, features = ["errors", "deterministic"] }
+scraper = { version = "0.27", default-features = false, features = ["errors", "deterministic"] }
 # Tree storage backing `scraper::Html::tree`. Used by `snapshot_from_html`
 # to walk parent/child links via `NodeRef`.
 ego-tree = "0.11"
diff --git a/crates/plumb-cli/Cargo.toml b/crates/plumb-cli/Cargo.toml
index 0af6eb1..e97a5e9 100644
--- a/crates/plumb-cli/Cargo.toml
+++ b/crates/plumb-cli/Cargo.toml
@@ -44,7 +44,7 @@ indexmap = { workspace = true }
 # CSS selector matcher for `--selector` (PRD §15.4). `errors` exposes the
 # selector parser's error types; `deterministic` keeps internal hash maps
 # deterministic so filter output is byte-stable across runs.
-scraper = { version = "0.26", default-features = false, features = ["errors", "deterministic"] }
+scraper = { version = "0.27", default-features = false, features = ["errors", "deterministic"] }
 # Filesystem watcher for `plumb watch` (#83). The debouncer collapses
 # bursts (editor save → temp file dance → atomic rename) into a single
 # cycle so the lint inner call runs at most once per debounce window.