diff --git a/bots/rhodibot/Cargo.lock b/bots/rhodibot/Cargo.lock
index 80008566..8853e55c 100644
--- a/bots/rhodibot/Cargo.lock
+++ b/bots/rhodibot/Cargo.lock
@@ -171,6 +171,12 @@ version = "0.22.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
+[[package]]
+name = "base64"
+version = "0.23.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac07cdecf99051d9a5238b80f35af32cdeba5b336e55d957b318b50137e18da5"
+
 [[package]]
 name = "bitflags"
 version = "1.3.2"
@@ -1687,7 +1693,7 @@ version = "0.1.20"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "96547c2556ec9d12fb1578c4eaf448b04993e7fb79cbaad930a656880a6bdfa0"
 dependencies = [
- "base64",
+ "base64 0.22.1",
  "bytes",
  "futures-channel",
  "futures-util",
@@ -2463,7 +2469,7 @@ version = "0.12.28"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "eddd3ca559203180a307f12d114c268abf583f59b03cb906fd0b3ff8646c1147"
 dependencies = [
- "base64",
+ "base64 0.22.1",
  "bytes",
  "futures-core",
  "http",
@@ -2501,7 +2507,7 @@ version = "0.1.0"
 dependencies = [
  "anyhow",
  "axum",
- "base64",
+ "base64 0.23.1",
  "chrono",
  "clap",
  "dotenvy",
@@ -3667,7 +3673,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "08db1edfb05d9b3c1542e521aea074442088292f00b5f28e435c714a98f85031"
 dependencies = [
  "assert-json-diff",
- "base64",
+ "base64 0.22.1",
  "deadpool",
  "futures",
  "http",
diff --git a/bots/rhodibot/Cargo.toml b/bots/rhodibot/Cargo.toml
index 15de2b28..3707e33e 100644
--- a/bots/rhodibot/Cargo.toml
+++ b/bots/rhodibot/Cargo.toml
@@ -37,7 +37,7 @@ toml = "1.1.2+spec-1.1.0"
 # which matters because CI builds with `--locked` and a regenerated lock would
 # otherwise have to be trusted sight-unseen.
 ring = "0.17"
-base64 = "0.22"
+base64 = "0.23"
 
 # Crypto for webhook verification
 hmac = "0.13.0"