diff --git a/packages/prometheus/package.json b/packages/prometheus/package.json
index 33ea9f02..b0b9752e 100644
--- a/packages/prometheus/package.json
+++ b/packages/prometheus/package.json
@@ -55,7 +55,7 @@
   "dependencies": {
     "@map-colonies/read-pkg": "workspace:^",
     "express": "^4.22.1",
-    "express-prom-bundle": "^7.0.2",
+    "express-prom-bundle": "^8.0.0",
     "lodash": "^4.17.21"
   }
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index ecf5a67a..0c288bf2 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -716,8 +716,8 @@ importers:
         specifier: ^4.22.1
         version: 4.22.2
       express-prom-bundle:
-        specifier: ^7.0.2
-        version: 7.0.2(prom-client@15.1.3)
+        specifier: ^8.0.0
+        version: 8.0.0(prom-client@15.1.3)
       lodash:
         specifier: ^4.17.21
         version: 4.18.1
@@ -2851,9 +2851,15 @@ packages:
   '@types/express-serve-static-core@4.19.7':
     resolution: {integrity: sha512-FvPtiIf1LfhzsaIXhv/PHan/2FeQBbtBDtfX2QfvPxdUelMDEckK08SM6nqo1MIZY3RUlfA+HV8+hFUSio78qg==}
 
+  '@types/express-serve-static-core@5.1.2':
+    resolution: {integrity: sha512-d3KvEXBSo/lOAMc2u6fkyDHBvetBHeqD7wm/AcXfLpSOQwlmG9D/aQ0SFswVjv05p7ullQS7Mjohj6/VdbZuTg==}
+
   '@types/express@4.17.25':
     resolution: {integrity: sha512-dVd04UKsfpINUnK0yBoYHDF3xu7xVH4BuDotC/xGuycx4CgbP48X/KF/586bcObxT0HENHXEU8Nqtu6NR+eKhw==}
 
+  '@types/express@5.0.6':
+    resolution: {integrity: sha512-sKYVuV7Sv9fbPIt/442koC7+IIwK5olP1KWeD88e/idgoJqDm3JV/YUiPwkoKK92ylff2MGxSz1CSjsXelx0YA==}
+
   '@types/hast@3.0.5':
     resolution: {integrity: sha512-rp/ezSWaD1m44dPKICGhiskI13nVr7qTloFwDa/IYkhhf5nzwP+zIQcIJh3WIFSBOy/H1PzB40jPjMDksN4F+g==}
 
@@ -2926,6 +2932,9 @@ packages:
   '@types/serve-static@1.15.10':
     resolution: {integrity: sha512-tRs1dB+g8Itk72rlSI2ZrW6vZg0YrLI81iQSTkMmOqnqCaNr/8Ek4VwWcN5vZgCYWbg/JJSGBlUaYGAOP73qBw==}
 
+  '@types/serve-static@2.2.0':
+    resolution: {integrity: sha512-8mam4H1NHLtu7nmtalF7eyBH14QyOASmcxHhSfEoRyr0nP/YdoesEtU+uSRvMe96TW/HPTtkoKqQLl53N7UXMQ==}
+
   '@types/ssh2-streams@0.1.13':
     resolution: {integrity: sha512-faHyY3brO9oLEA0QlcO8N2wT7R0+1sHWZvQ+y3rMLwdY1ZyS1z0W3t65j9PqT4HmQ6ALzNe7RZlNuCNE0wBSWA==}
 
@@ -4207,8 +4216,8 @@ packages:
     resolution: {integrity: sha512-KfYbmpRm0VbLjEvVa9yGwCi9GI34xvi7A/HXYWQO65CSD2u3MczUJSuwXKFIxlGsgBQizV9q5J9NHj4VG0n+pA==}
     engines: {node: '>=12.0.0'}
 
-  express-prom-bundle@7.0.2:
-    resolution: {integrity: sha512-ffFV4HGHvCKnkNJFqm42sYztRJE5mLgOj8MpGey1HOatuFhtcwXoBD2m5gca7ZbcyjkIf7lOH5ZdrhlrBf0sGw==}
+  express-prom-bundle@8.0.0:
+    resolution: {integrity: sha512-UHdpaMks6Z/tvxQsNzhsE7nkdXb4/zEh/jwN0tfZSZOEF+aD0dlfl085EU4jveOq09v01c5sIUfjV4kJODZ2eQ==}
     engines: {node: '>=18'}
     peerDependencies:
       prom-client: '>=15.0.0'
@@ -8615,6 +8624,13 @@ snapshots:
       '@types/range-parser': 1.2.7
       '@types/send': 1.2.1
 
+  '@types/express-serve-static-core@5.1.2':
+    dependencies:
+      '@types/node': 25.0.0
+      '@types/qs': 6.14.0
+      '@types/range-parser': 1.2.7
+      '@types/send': 1.2.1
+
   '@types/express@4.17.25':
     dependencies:
       '@types/body-parser': 1.19.6
@@ -8622,6 +8638,12 @@ snapshots:
       '@types/qs': 6.14.0
       '@types/serve-static': 1.15.10
 
+  '@types/express@5.0.6':
+    dependencies:
+      '@types/body-parser': 1.19.6
+      '@types/express-serve-static-core': 5.1.2
+      '@types/serve-static': 2.2.0
+
   '@types/hast@3.0.5':
     dependencies:
       '@types/unist': 3.0.3
@@ -8712,6 +8734,11 @@ snapshots:
       '@types/node': 25.0.0
       '@types/send': 0.17.6
 
+  '@types/serve-static@2.2.0':
+    dependencies:
+      '@types/http-errors': 2.0.5
+      '@types/node': 25.0.0
+
   '@types/ssh2-streams@0.1.13':
     dependencies:
       '@types/node': 25.0.0
@@ -10100,15 +10127,12 @@ snapshots:
 
   expect-type@1.4.0: {}
 
-  express-prom-bundle@7.0.2(prom-client@15.1.3):
+  express-prom-bundle@8.0.0(prom-client@15.1.3):
     dependencies:
-      '@types/express': 4.17.25
-      express: 4.22.2
+      '@types/express': 5.0.6
       on-finished: 2.4.1
       prom-client: 15.1.3
       url-value-parser: 2.2.0
-    transitivePeerDependencies:
-      - supports-color
 
   express@4.22.2:
     dependencies: