diff --git a/tvix/Cargo.lock b/tvix/Cargo.lock
index ab7eec0b7..d115ade76 100644
--- a/tvix/Cargo.lock
+++ b/tvix/Cargo.lock
@@ -893,9 +893,9 @@ dependencies = [
 
 [[package]]
 name = "data-encoding"
-version = "2.5.0"
+version = "2.6.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7e962a19be5cfc3f3bf6dd8f61eb50107f356ad6270fbb3ed41476571db78be5"
+checksum = "e8566979429cf69b49a5c740c60791108e86440e8be149bbea4fe54d2c32d6e2"
 
 [[package]]
 name = "der"
diff --git a/tvix/Cargo.nix b/tvix/Cargo.nix
index 008080c46..32fc64c62 100644
--- a/tvix/Cargo.nix
+++ b/tvix/Cargo.nix
@@ -2745,9 +2745,9 @@ rec {
       };
       "data-encoding" = rec {
         crateName = "data-encoding";
-        version = "2.5.0";
+        version = "2.6.0";
         edition = "2018";
-        sha256 = "1rcbnwfmfxhlshzbn3r7srm3azqha3mn33yxyqxkzz2wpqcjm5ky";
+        sha256 = "1qnn68n4vragxaxlkqcb1r28d3hhj43wch67lm4rpxlw89wnjmp8";
         authors = [
           "Julien Cretin <git@ia0.eu>"
         ];
diff --git a/tvix/castore/Cargo.toml b/tvix/castore/Cargo.toml
index 951613057..dc30419f7 100644
--- a/tvix/castore/Cargo.toml
+++ b/tvix/castore/Cargo.toml
@@ -10,7 +10,7 @@ async-tempfile = "0.4.0"
 blake3 = { version = "1.3.1", features = ["rayon", "std", "traits-preview"] }
 bstr = "1.6.0"
 bytes = "1.4.0"
-data-encoding = "2.3.3"
+data-encoding = "2.6.0"
 digest = "0.10.7"
 fastcdc = { version = "3.1.0", features = ["tokio"] }
 futures = "0.3.30"
diff --git a/tvix/eval/Cargo.toml b/tvix/eval/Cargo.toml
index 4cf8ea146..330105acf 100644
--- a/tvix/eval/Cargo.toml
+++ b/tvix/eval/Cargo.toml
@@ -33,7 +33,7 @@ toml = "0.6.0"
 sha2 = "0.10.8"
 sha1 = "0.10.6"
 md-5 = "0.10.6"
-data-encoding = "2.5.0"
+data-encoding = "2.6.0"
 
 [dev-dependencies]
 criterion = "0.5"
diff --git a/tvix/glue/Cargo.toml b/tvix/glue/Cargo.toml
index 6968210c5..1bf105251 100644
--- a/tvix/glue/Cargo.toml
+++ b/tvix/glue/Cargo.toml
@@ -7,7 +7,7 @@ edition = "2021"
 async-compression = { version = "0.4.9", features = ["tokio", "gzip", "bzip2", "xz"]}
 bstr = "1.6.0"
 bytes = "1.4.0"
-data-encoding = "2.3.3"
+data-encoding = "2.6.0"
 futures = "0.3.30"
 magic = "0.16.2"
 nix-compat = { path = "../nix-compat" }
diff --git a/tvix/nix-compat/Cargo.toml b/tvix/nix-compat/Cargo.toml
index 91fd19475..73928b1ac 100644
--- a/tvix/nix-compat/Cargo.toml
+++ b/tvix/nix-compat/Cargo.toml
@@ -15,7 +15,7 @@ default = ["async", "wire"]
 [dependencies]
 bitflags = "2.4.1"
 bstr = { version = "1.6.0", features = ["alloc", "unicode", "serde"] }
-data-encoding = "2.3.3"
+data-encoding = "2.6.0"
 ed25519 = "2.2.3"
 ed25519-dalek = "2.1.0"
 enum-primitive-derive = "0.3.0"
diff --git a/tvix/store/Cargo.toml b/tvix/store/Cargo.toml
index 733b7c11f..5dd1747c1 100644
--- a/tvix/store/Cargo.toml
+++ b/tvix/store/Cargo.toml
@@ -12,7 +12,7 @@ bstr = "1.6.0"
 bytes = "1.4.0"
 clap = { version = "4.0", features = ["derive", "env"] }
 count-write = "0.1.0"
-data-encoding = "2.3.3"
+data-encoding = "2.6.0"
 futures = "0.3.30"
 lazy_static = "1.4.0"
 nix-compat = { path = "../nix-compat", features = ["async"] }
diff --git a/tvix/tools/turbofetch/Cargo.toml b/tvix/tools/turbofetch/Cargo.toml
index 6b2f0e752..65a7be9a5 100644
--- a/tvix/tools/turbofetch/Cargo.toml
+++ b/tvix/tools/turbofetch/Cargo.toml
@@ -10,7 +10,7 @@ members = ["."]
 [dependencies]
 aws_lambda_events = { version = "0.11.1", default-features = false, features = ["lambda_function_urls"] }
 bytes = "1.5.0"
-data-encoding = "2.4.0"
+data-encoding = "2.6.0"
 futures = { version = "0.3.30", default-features = false, features = ["std"] }
 httparse = "1.8.0"
 hyper = { version = "0.14.27", default-features = false }
diff --git a/web/tvixbolt/Cargo.lock b/web/tvixbolt/Cargo.lock
index d7a23d785..02d372912 100644
--- a/web/tvixbolt/Cargo.lock
+++ b/web/tvixbolt/Cargo.lock
@@ -132,9 +132,9 @@ dependencies = [
 
 [[package]]
 name = "data-encoding"
-version = "2.5.0"
+version = "2.6.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7e962a19be5cfc3f3bf6dd8f61eb50107f356ad6270fbb3ed41476571db78be5"
+checksum = "e8566979429cf69b49a5c740c60791108e86440e8be149bbea4fe54d2c32d6e2"
 
 [[package]]
 name = "digest"