diff --git a/HISTORY.md b/HISTORY.md
index 69c0263b..f47cf57b 100644
--- a/HISTORY.md
+++ b/HISTORY.md
@@ -1,6 +1,9 @@
 unreleased
 ==========
 
+  * deps: bytes@2.3.0
+    - Drop partial bytes on all parsed units
+    - Fix parsing byte string that looks like hex
   * deps: raw-body@~2.1.6
     - deps: bytes@2.3.0
   * deps: type-is@~1.6.12
diff --git a/package.json b/package.json
index 58edfbb5..55880f47 100644
--- a/package.json
+++ b/package.json
@@ -9,7 +9,7 @@
   "license": "MIT",
   "repository": "expressjs/body-parser",
   "dependencies": {
-    "bytes": "2.2.0",
+    "bytes": "2.3.0",
     "content-type": "~1.0.1",
     "debug": "~2.2.0",
     "depd": "~1.1.0",