diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 238694a..eb46908 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -25,7 +25,7 @@ concurrency:
 
 env:
   CARGO_TERM_COLOR: always
-  RUST_TOOLCHAIN_VERSION: "1.95.0"
+  RUST_TOOLCHAIN_VERSION: "1.97.1"
 
 # Every job below names a runner image rather than a `-latest` alias, so an
 # image roll cannot change what a merge is gated on. The label cannot be lifted
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 44df6d7..c035dbd 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -15,7 +15,7 @@ permissions:
 
 env:
   CARGO_TERM_COLOR: always
-  RUST_TOOLCHAIN_VERSION: "1.95.0"
+  RUST_TOOLCHAIN_VERSION: "1.97.1"
   # Both pinned rather than floating. packaging/test-sbom.sh asserts the shape of
   # what syft emits and how cargo-auditable's .dep-v0 section reads, so a release
   # of either that changes that shape has to be adopted deliberately and
diff --git a/rust-toolchain.toml b/rust-toolchain.toml
index f92020c..30a41bc 100644
--- a/rust-toolchain.toml
+++ b/rust-toolchain.toml
@@ -1,3 +1,3 @@
 [toolchain]
-channel = "1.95.0"
+channel = "1.97.1"
 profile = "default"