diff --git a/Cargo.lock b/Cargo.lock
index 61f8502..43db8ce 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -9,7 +9,7 @@ dependencies = [
  "act-store",
  "act-types",
  "anyhow",
- "base64 0.22.1",
+ "base64 0.23.1",
  "ciborium",
  "clap",
  "dirs",
@@ -54,7 +54,7 @@ dependencies = [
  "assert_cmd",
  "async-trait",
  "axum",
- "base64 0.22.1",
+ "base64 0.23.1",
  "bytesize",
  "ciborium",
  "clap",
@@ -109,7 +109,7 @@ version = "0.13.2"
 dependencies = [
  "act-runtime",
  "act-types",
- "base64 0.22.1",
+ "base64 0.23.1",
  "rmcp",
  "serde_json",
 ]
@@ -187,7 +187,7 @@ dependencies = [
 name = "act-store"
 version = "0.13.2"
 dependencies = [
- "base64 0.22.1",
+ "base64 0.23.1",
  "chrono",
  "dirs",
  "flate2",
diff --git a/Cargo.toml b/Cargo.toml
index d5f4aae..47e4ba8 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -85,7 +85,7 @@ hclient-dns = "0.1.0-alpha.11"
 hclient-dns-system = "0.1.0-alpha.12"
 # Shared across two or more workspace members.
 anyhow = "1.0.102"
-base64 = "0.22.1"
+base64 = "0.23.1"
 # CSPRNG for the OAuth flow's PKCE verifier, `state`, and one-time callback
 # path. `getrandom` rather than `rand`: these want OS entropy directly, not a
 # seeded PRNG, and 0.3 is already in the tree.