diff --git a/desktop/src-tauri/Cargo.lock b/desktop/src-tauri/Cargo.lock
index 64d7bc5e..0e6515f2 100644
--- a/desktop/src-tauri/Cargo.lock
+++ b/desktop/src-tauri/Cargo.lock
@@ -1840,7 +1840,7 @@ dependencies = [
 
 [[package]]
 name = "kaisho-desktop"
-version = "2.8.3"
+version = "2.9.1"
 dependencies = [
  "ab_glyph",
  "embed_plist",
diff --git a/scripts/bump-version.sh b/scripts/bump-version.sh
index 8055ed43..453ac709 100755
--- a/scripts/bump-version.sh
+++ b/scripts/bump-version.sh
@@ -63,6 +63,15 @@ p.write_text(json.dumps(data, indent=2) + '\n')
 sed -i '' "s/^version = \".*\"/version = \"$VERSION\"/" \
     "$ROOT/desktop/src-tauri/Cargo.toml"
 
+# Cargo.lock carries the crate's own version too, and cargo
+# rewrites it on the next build. Leaving it behind means the
+# committed lock is a release or two stale and every build
+# dirties the working tree -- which trains people to discard
+# the change without reading it. --offline so a version bump
+# does not need the network, and -p so nothing else moves.
+(cd "$ROOT/desktop/src-tauri" \
+    && cargo update --offline -p kaisho-desktop >/dev/null)
+
 # frontend/package.json
 python3 -c "
 import json, pathlib
@@ -72,4 +81,5 @@ data['version'] = '$VERSION'
 p.write_text(json.dumps(data, indent=2) + '\n')
 "
 
-echo "Done: pyproject.toml, tauri.conf.json, Cargo.toml, frontend/package.json all at v$VERSION"
+echo "Done: pyproject.toml, tauri.conf.json, Cargo.toml, \
+Cargo.lock, frontend/package.json all at v$VERSION"