diff --git a/CHANGELOG.md b/CHANGELOG.md
index caa284d..ed97bfd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,7 +1,11 @@
-## [*Unreleased*](https://github.com/thoughtbot/yesod-auth-oauth2/compare/v0.6.1.3...master)
+## [*Unreleased*](https://github.com/thoughtbot/yesod-auth-oauth2/compare/v0.6.1.4...master)
 
 None
 
+## [v0.6.1.4](https://github.com/thoughtbot/yesod-auth-oauth2/compare/v0.6.1.3...v0.6.1.4)
+
+- Tighten upper bound on hoauth2
+
 ## [v0.6.1.3](https://github.com/thoughtbot/yesod-auth-oauth2/compare/v0.6.1.2...v0.6.1.3)
 
 - Replace `System.Random` state token generation with `cryptonite`
diff --git a/package.yaml b/package.yaml
index be455ba..6863d2a 100644
--- a/package.yaml
+++ b/package.yaml
@@ -1,6 +1,6 @@
 ---
 name: yesod-auth-oauth2
-version: '0.6.1.3'  # N.B. PVP-compliant Semver: 0.MAJOR.MINOR.PATCH
+version: '0.6.1.4'  # N.B. PVP-compliant Semver: 0.MAJOR.MINOR.PATCH
 synopsis: OAuth 2.0 authentication plugins
 description: Library to authenticate with OAuth 2.0 for Yesod web applications.
 category: Web