diff --git a/HISTORY.md b/HISTORY.md
index 07224678..4464de3b 100644
--- a/HISTORY.md
+++ b/HISTORY.md
@@ -1,6 +1,10 @@
 unreleased
 ==========
 
+  * deps: bytes@2.3.0
+    - Drop partial bytes on all parsed units
+    - Fix parsing byte string that looks like hex
+    - perf: hoist regular expressions
   * deps: accepts@~1.3.2
     - deps: mime-types@~2.1.10
 
diff --git a/package.json b/package.json
index 9ace7dc7..7614c712 100644
--- a/package.json
+++ b/package.json
@@ -10,7 +10,7 @@
   "repository": "expressjs/compression",
   "dependencies": {
     "accepts": "~1.3.2",
-    "bytes": "2.2.0",
+    "bytes": "2.3.0",
     "compressible": "~2.0.7",
     "debug": "~2.2.0",
     "on-headers": "~1.0.1",