diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2d68a01..6ef54e0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -20,7 +20,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Bump `vergen` from 8.2.6 to 8.3.1 ([#721](https://github.com/vbrandl/hoc/pull/721), [#730](https://github.com/vbrandl/hoc/pull/730))
 - Bump `actions/cache` from 3 to 4 ([#724](https://github.com/vbrandl/hoc/pull/724))
 - Bump `h2` from 0.3.20 to 0.3.24 ([#725](https://github.com/vbrandl/hoc/pull/725))
-- Bump `git2` from 0.18.1 to 0.18.2 ([#734](https://github.com/vbrandl/hoc/pull/734))
+- Bump `git2` from 0.18.1 to 0.18.3 ([#734](https://github.com/vbrandl/hoc/pull/734), [#748](https://github.com/vbrandl/hoc/pull/748))
 - Bump `tracing-actix-web` from 0.7.9 to 0.7.10 ([#742](https://github.com/vbrandl/hoc/pull/742))
 - Bump `mio` from 0.8.9 to 0.8.11 ([#740](https://github.com/vbrandl/hoc/pull/740))
 - Bump `softprops/action-gh-release` from 1 to 2 ([#743](https://github.com/vbrandl/hoc/pull/743))
diff --git a/Cargo.lock b/Cargo.lock
index 9fbf30a..2ae7d88 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -869,9 +869,9 @@ checksum = "b6c80984affa11d98d1b88b66ac8853f143217b399d3c74116778ff8fdb4ed2e"
 
 [[package]]
 name = "git2"
-version = "0.18.2"
+version = "0.18.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1b3ba52851e73b46a4c3df1d89343741112003f0f6f13beb0dfac9e457c3fdcd"
+checksum = "232e6a7bfe35766bf715e55a88b39a700596c0ccfd88cd3680b4cdb40d66ef70"
 dependencies = [
  "bitflags 2.4.1",
  "libc",
diff --git a/Cargo.toml b/Cargo.toml
index f6b1fbe..da579e2 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -20,7 +20,7 @@ bytes = "1.5.0"
 config = { version = "0.14.0", features = ["toml"] }
 dotenvy = "0.15.7"
 futures = "0.3.30"
-git2 = "0.18.2"
+git2 = "0.18.3"
 lazy_static = "1.4.0"
 mime = "0.3"
 number_prefix = "0.4.0"