diff --git a/hackage-security-curl/hackage-security-curl.cabal b/hackage-security-curl/hackage-security-curl.cabal
index 1dad0ad8..feed1d49 100644
--- a/hackage-security-curl/hackage-security-curl.cabal
+++ b/hackage-security-curl/hackage-security-curl.cabal
@@ -32,10 +32,10 @@ flag use-network-uri
 
 library
   exposed-modules:     Hackage.Security.Client.Repository.HttpLib.Curl
-  build-depends:       base        >= 4.11 && < 4.20,
-                       bytestring  >= 0.9,
-                       process     >= 1.1,
-                       hackage-security
+  build-depends:       base             >= 4.11   && < 4.20,
+                       bytestring       >= 0.10.8 && < 0.13,
+                       process          >= 1.6.3  && < 1.7,
+                       hackage-security >= 0.6.2  && < 0.7
   hs-source-dirs:      src
   default-language:    Haskell2010
   ghc-options:         -Wall
diff --git a/hackage-security-http-client/hackage-security-http-client.cabal b/hackage-security-http-client/hackage-security-http-client.cabal
index 72b772cd..e8a54932 100644
--- a/hackage-security-http-client/hackage-security-http-client.cabal
+++ b/hackage-security-http-client/hackage-security-http-client.cabal
@@ -13,6 +13,7 @@ copyright:           Copyright 2015 Well-Typed LLP
 category:            Distribution
 build-type:          Simple
 cabal-version:       >=1.10
+extra-source-files:  ChangeLog.md
 
 tested-with:
   GHC == 9.8.1
@@ -31,11 +32,11 @@ flag use-network-uri
 
 library
   exposed-modules:     Hackage.Security.Client.Repository.HttpLib.HttpClient
-  build-depends:       base               >= 4.11 && < 4.20,
-                       bytestring         >= 0.9,
-                       http-client        >= 0.4 && < 0.8,
-                       http-types         >= 0.8,
-                       hackage-security   >= 0.5 && < 0.7
+  build-depends:       base               >= 4.11   && < 4.20,
+                       bytestring         >= 0.10.8 && < 0.13,
+                       http-client        >= 0.4    && < 0.8,
+                       http-types         >= 0.12.4 && < 0.13,
+                       hackage-security   >= 0.5    && < 0.7
   hs-source-dirs:      src
   default-language:    Haskell2010
   default-extensions:  FlexibleContexts
diff --git a/hackage-security/hackage-security.cabal b/hackage-security/hackage-security.cabal
index 80644da4..3ebfa870 100644
--- a/hackage-security/hackage-security.cabal
+++ b/hackage-security/hackage-security.cabal
@@ -127,8 +127,7 @@ library
                        time              >= 1.5     && < 1.13,
                        transformers      >= 0.3     && < 0.7,
                        zlib              >= 0.5     && < 0.7,
-                       -- whatever versions are bundled with ghc:
-                       ghc-prim
+                       ghc-prim          >= 0.5.2   && < 0.12
 
   if flag(lukko)
     build-depends:     lukko      >= 0.1     && < 0.2
diff --git a/precompute-fileinfo/precompute-fileinfo.cabal b/precompute-fileinfo/precompute-fileinfo.cabal
index 8bcf747b..4c903884 100644
--- a/precompute-fileinfo/precompute-fileinfo.cabal
+++ b/precompute-fileinfo/precompute-fileinfo.cabal
@@ -27,15 +27,15 @@ tested-with:
 
 executable precompute-fileinfo
   main-is:             Main.hs
-  build-depends:       base                 >= 4.11,
-                       bytestring           >= 0.9,
-                       containers           >= 0.4,
-                       deepseq              >= 1.3,
-                       filepath             >= 1.2,
-                       optparse-applicative >= 0.11,
-                       SHA                  >= 1.6,
-                       tar                  >= 0.4,
-                       zlib                 >= 0.5
+  build-depends:       base                 >= 4.11   && < 4.20,
+                       bytestring           >= 0.10.8 && < 0.13,
+                       containers           >= 0.5.11 && < 0.7,
+                       deepseq              >= 1.4.3  && < 1.6,
+                       filepath             >= 1.4.2  && < 1.5,
+                       optparse-applicative >= 0.18.1 && < 0.19,
+                       SHA                  >= 1.6.4  && < 1.7,
+                       tar                  >= 0.6.0  && < 0.7,
+                       zlib                 >= 0.6.3  && < 0.7
   hs-source-dirs:      src
   default-language:    Haskell2010
   default-extensions:  RecordWildCards