diff --git a/CHANGELOG.md b/CHANGELOG.md
index 01a2efa..01968a0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,7 +13,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Bump `tracing-actix-web` from 0.7.4 to 0.7.5 (#623)
 - Bump `git2` from 0.17.1 to 0.17.2 (#624)
 - Bump `tempfile` from 3.5.0 to 3.7.0 (#626, [#646](https://github.com/vbrandl/hoc/pull/646))
-- Bump `serde_json` from 1.0.96 to 1.0.103 (#630, #632, #637, #641, #644)
+- Bump `serde_json` from 1.0.96 to 1.0.104 (#630, #632, #637, #641, #644, [#649](https://github.com/vbrandl/hoc/pull/649))
 - Bump `openssl` from 0.10.50 to 0.10.55 (#631)
 - Bump `tracing-bunyan-formatter` from 0.3.7 to 0.3.8 (#642)
 - Bump `anyhow` from 1.0.71 to 1.0.72 (#643)
diff --git a/Cargo.lock b/Cargo.lock
index c3ecbba..d73611f 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2489,9 +2489,9 @@ dependencies = [
 
 [[package]]
 name = "serde_json"
-version = "1.0.103"
+version = "1.0.104"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d03b412469450d4404fe8499a268edd7f8b79fecb074b0d812ad64ca21f4031b"
+checksum = "076066c5f1078eac5b722a31827a8832fe108bed65dfa75e233c89f8206e976c"
 dependencies = [
  "itoa",
  "ryu",
diff --git a/Cargo.toml b/Cargo.toml
index 9e0cb81..2946608 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -28,7 +28,7 @@ openssl-probe = "0.1.5"
 reqwest = "0.11.18"
 serde = "1.0.175"
 serde_derive = "1.0.166"
-serde_json = "1.0.103"
+serde_json = "1.0.104"
 tracing = "0.1.37"
 tracing-actix-web = "0.7.5"
 tracing-bunyan-formatter = "0.3.8"