diff --git a/tool/versions.env b/tool/versions.env
index e118a1f..dbae3e0 100644
--- a/tool/versions.env
+++ b/tool/versions.env
@@ -8,4 +8,4 @@
 # PANA_VERSION tracks pub.dev's LATEST so the platform gate runs the same pana
 # pub.dev runs. tool/ci/upgrade.sh (the daily upgrade-check.yml pins job) bumps
 # it automatically in its own reviewed PR — the same radar as pdf_manipulator.
-PANA_VERSION="0.23.14"
+PANA_VERSION="0.23.18"