diff --git a/apps/repl/package.json b/apps/repl/package.json
index 63f60fc680..f3a6bd4525 100644
--- a/apps/repl/package.json
+++ b/apps/repl/package.json
@@ -173,6 +173,6 @@
     "unist-util-visit": "^5.0.0",
     "webpack-bundle-analyzer": "^4.10.2",
     "ws": "^8.15.1",
-    "xstate": "4.35.4"
+    "xstate": "4.38.3"
   }
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 3c327a9724..537db25f97 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -74,7 +74,7 @@ importers:
         version: link:../../packages/app-support/transpilation
       '@xstate/inspect':
         specifier: ^0.8.0
-        version: 0.8.0(ws@8.17.0)(xstate@4.35.4)
+        version: 0.8.0(ws@8.17.0)(xstate@4.38.3)
       browserslist:
         specifier: ^4.22.3
         version: 4.23.0
@@ -113,7 +113,7 @@ importers:
         version: 7.0.1(@glimmer/component@1.1.2(@babel/core@7.24.5))(@glimmer/tracking@1.1.2)(@glint/template@1.4.0)(ember-source@5.9.0(@babel/core@7.24.5)(@glimmer/component@1.1.2(@babel/core@7.24.5))(@glint/template@1.4.0)(rsvp@4.8.5)(webpack@5.90.3))
       ember-statechart-component:
         specifier: 6.1.2
-        version: 6.1.2(@glint/template@1.4.0)(xstate@4.35.4)
+        version: 6.1.2(@glint/template@1.4.0)(xstate@4.38.3)
       highlight.js:
         specifier: ^11.9.0
         version: 11.9.0
@@ -181,8 +181,8 @@ importers:
         specifier: ^8.15.1
         version: 8.17.0
       xstate:
-        specifier: 4.35.4
-        version: 4.35.4
+        specifier: 4.38.3
+        version: 4.38.3
     devDependencies:
       '@babel/core':
         specifier: ^7.24.5
@@ -3967,6 +3967,7 @@ packages:
   '@humanwhocodes/config-array@0.11.14':
     resolution: {integrity: sha512-3T8LkOmg45BV5FICb15QQMsyUSWrQ8AygVfC7ZG32zOalnqrilm018ZVCw0eapXux8FtA33q8PSRSstjee3jSg==}
     engines: {node: '>=10.10.0'}
+    deprecated: Use @eslint/config-array instead
 
   '@humanwhocodes/module-importer@1.0.1':
     resolution: {integrity: sha512-bxveV4V8v5Yb4ncFTT3rPSgZBOpCkjfK0y4oVVVJwIuDVBRMDXrPyXRL988i5ap9m9bnyEEjWfm5WkBmtffLfA==}
@@ -3974,6 +3975,7 @@ packages:
 
   '@humanwhocodes/object-schema@2.0.3':
     resolution: {integrity: sha512-93zYdMES/c1D69yZiKDBj0V24vqNzB/koF26KPaagAfd3P/4gUlh3Dys5ogAK+Exi9QyzlD8x/08Zt7wIKcDcA==}
+    deprecated: Use @eslint/object-schema instead
 
   '@inquirer/figures@1.0.2':
     resolution: {integrity: sha512-4F1MBwVr3c/m4bAUef6LgkvBfSjzwH+OfldgHqcuacWwSUetFebM2wi58WfG9uk1rR98U6GwLed4asLJbwdV5w==}
@@ -11853,8 +11855,8 @@ packages:
   xmlchars@2.2.0:
     resolution: {integrity: sha512-JZnDKK8B0RCDw84FNdDAIpZK+JuJw+s7Lz8nksI7SIuU3UXJJslUthsi+uWBUYOwPFwW7W7PRLRfUKpxjtjFCw==}
 
-  xstate@4.35.4:
-    resolution: {integrity: sha512-mqRBYHhljP1xIItI4xnSQNHEv6CKslSM1cOGmvhmxeoDPAZgNbhSUYAL5N6DZIxRfpYY+M+bSm3mUFHD63iuvg==}
+  xstate@4.38.3:
+    resolution: {integrity: sha512-SH7nAaaPQx57dx6qvfcIgqKRXIh4L0A1iYEqim4s1u7c9VoCgzZc+63FY90AKU4ZzOC2cfJzTnpO4zK7fCUzzw==}
 
   y18n@5.0.8:
     resolution: {integrity: sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==}
@@ -15461,11 +15463,11 @@ snapshots:
 
   '@xmldom/xmldom@0.8.10': {}
 
-  '@xstate/inspect@0.8.0(ws@8.17.0)(xstate@4.35.4)':
+  '@xstate/inspect@0.8.0(ws@8.17.0)(xstate@4.38.3)':
     dependencies:
       fast-safe-stringify: 2.1.1
       ws: 8.17.0
-      xstate: 4.35.4
+      xstate: 4.38.3
 
   '@xtuc/ieee754@1.2.0': {}
 
@@ -18352,11 +18354,11 @@ snapshots:
       - supports-color
       - webpack
 
-  ember-statechart-component@6.1.2(@glint/template@1.4.0)(xstate@4.35.4):
+  ember-statechart-component@6.1.2(@glint/template@1.4.0)(xstate@4.38.3):
     dependencies:
       '@embroider/addon-shim': 1.8.8
       ember-tracked-storage-polyfill: 1.0.0
-      xstate: 4.35.4
+      xstate: 4.38.3
     optionalDependencies:
       '@glint/template': 1.4.0
     transitivePeerDependencies:
@@ -24719,7 +24721,7 @@ snapshots:
 
   xmlchars@2.2.0: {}
 
-  xstate@4.35.4: {}
+  xstate@4.38.3: {}
 
   y18n@5.0.8: {}