diff --git a/build-constraints.yaml b/build-constraints.yaml
index 9f0d6fe3..1e4f4aca 100644
--- a/build-constraints.yaml
+++ b/build-constraints.yaml
@@ -5685,6 +5685,7 @@ packages:
         - minisat
         - minisat-solver
         - missing-foreign
+        - mlkem
         - mmap
         - mmorph
         - mockery
@@ -7773,27 +7774,6 @@ packages:
         - base-compat < 0.15.0
         - base-compat-batteries < 0.15.0
 
-        # https://github.com/commercialhaskell/stackage/issues/7929
-        - crypto-token < 0.2.0
-        - crypton < 1.1.0
-        - crypton-conduit < 0.3.0
-        - crypton-connection < 0.4.6
-        - crypton-x509 < 1.8.0
-        - crypton-x509-store < 1.8.0
-        - crypton-x509-system < 1.8.0
-        - crypton-x509-validation < 1.8.0
-        - hpke < 0.1.0
-        - http3 < 0.1.3
-        - quic < 0.2.22
-        - tls < 2.2.0
-        - tls-session-manager < 0.1.0
-        - smtp-mail < 0.5.0.1
-        - pusher-http-haskell < 2.1.0.22
-        - wreq < 0.5.4.5
-        - password < 3.1.1
-        - mime-mail-ses < 0.4.5
-        - hash-tree < 0.1.0
-
         # https://github.com/commercialhaskell/stackage/issues/7930
         - happy < 2.2
         - happy-lib < 2.2
@@ -7829,19 +7809,12 @@ packages:
         # https://github.com/commercialhaskell/stackage/issues/8018
         - text-iso8601 < 0.2
 
-        # https://github.com/commercialhaskell/stackage/issues/8033
-        - jose < 0.13
-
         # https://github.com/commercialhaskell/stackage/issues/8037
         - magic < 1.2
 
         # https://github.com/commercialhaskell/stackage/issues/8049
         - apecs < 0.10
 
-        # https://github.com/commercialhaskell/stackage/issues/7966
-        - http-client-tls < 0.4
-        - aws < 0.25.3
-
         # https://github.com/commercialhaskell/stackage/issues/8058
         - hackage-revdeps < 0.4
     # end of Stackage upper bounds
@@ -7871,6 +7844,10 @@ package-flags:
     curl:
         new-base: true
 
+    # https://github.com/dhall-lang/dhall-haskell/issues/2748
+    dhall:
+        use-http-client-tls: false
+
     hpio:
         test-hlint: false
 
@@ -7969,9 +7946,6 @@ package-flags:
     path:
       os-string: true
 
-    # https://github.com/commercialhaskell/stackage/issues/7929
-    mysql-haskell:
-      crypton-1-1: false
 # end of package-flags
 
 # Special configure options for individual packages