diff --git a/Cargo.lock b/Cargo.lock
index 1c24c99..6be95e9 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5440,7 +5440,7 @@ name = "vta-agent-memory"
 version = "0.8.2"
 dependencies = [
  "anyhow",
- "base64 0.22.1",
+ "base64 0.23.1",
  "chrono",
  "clap",
  "dirs",
diff --git a/Cargo.toml b/Cargo.toml
index 374d3ae..a01dc91 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -73,7 +73,7 @@ toml = "1.1"
 getrandom = "0.4"
 # A sealed room record's body arrives base64url (`rooms/keys/read`), and is
 # verified here, so it is decoded here (#34). Already in the graph.
-base64 = "0.22"
+base64 = "0.23"
 
 [dev-dependencies]
 tempfile = "3"