diff --git a/CHANGELOG.md b/CHANGELOG.md
index cd2c1fa..9fc4f81 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,11 +9,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 * Updated [`git2`](https://github.com/rust-lang/git2-rs) from 0.16.1 to 0.17.0 ([#602])
 * Updated [`git2`](https://github.com/rust-lang/git2-rs) from 0.17.0 to 0.17.1 ([#603])
 * Updated [`tracing-subscriber`](https://github.com/tokio-rs/tracing) from 0.3.16 to 0.3.17 ([#604])
+* Updated [`tokio`](https://github.com/tokio-rs/tokio) from 1.27.0 to 1.28.0 ([#605])
 
 [#599]: https://github.com/vbrandl/hoc/pull/599
 [#602]: https://github.com/vbrandl/hoc/pull/602
 [#603]: https://github.com/vbrandl/hoc/pull/603
 [#604]: https://github.com/vbrandl/hoc/pull/604
+[#605]: https://github.com/vbrandl/hoc/pull/605
 
 [SEC#11]: https://github.com/vbrandl/hoc/security/dependabot/11
 
diff --git a/Cargo.lock b/Cargo.lock
index d4fc465..a8b7f52 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2582,9 +2582,9 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
 
 [[package]]
 name = "tokio"
-version = "1.27.0"
+version = "1.28.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d0de47a4eecbe11f498978a9b29d792f0d2692d1dd003650c24c76510e3bc001"
+checksum = "c3c786bf8134e5a3a166db9b29ab8f48134739014a3eca7bc6bfa95d673b136f"
 dependencies = [
  "autocfg",
  "bytes",
@@ -2594,7 +2594,7 @@ dependencies = [
  "pin-project-lite",
  "signal-hook-registry",
  "socket2",
- "windows-sys 0.45.0",
+ "windows-sys 0.48.0",
 ]
 
 [[package]]
diff --git a/Cargo.toml b/Cargo.toml
index f73392d..10ae3e1 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -45,4 +45,4 @@ vergen = { version = "8.1.1", default-features = false, features = ["git", "gito
 awc = "3.1.1"
 ructe = "0.16.1"
 tempfile = "3.5.0"
-tokio = "1.27.0"
+tokio = "1.28.0"