diff --git a/ChangeLog.md b/ChangeLog.md
--- a/ChangeLog.md
+++ b/ChangeLog.md
@@ -1,5 +1,9 @@
 # Changelog for biscuit-servant
 
+## 0.5.0.0
+
+- use biscuit-haskell 0.5.0.0
+
 ## 0.4.0.0
 
 - use biscuit-haskell 0.4.0.0
diff --git a/README.md b/README.md
--- a/README.md
+++ b/README.md
@@ -6,7 +6,7 @@
 
 ## Usage
 
-```Haskell
+```haskell
 type AppM = WithAuthorizer Handler
 type API = RequireBiscuit :> ProtectedAPI
 
diff --git a/biscuit-servant.cabal b/biscuit-servant.cabal
--- a/biscuit-servant.cabal
+++ b/biscuit-servant.cabal
@@ -1,7 +1,7 @@
-cabal-version: 2.0
+cabal-version: 3.0
 
 name:           biscuit-servant
-version:        0.4.0.0
+version:        0.5.0.0
 category:       Security
 synopsis:       Servant support for the Biscuit security token
 description:    Please see the README on GitHub at <https://github.com/biscuit-auth/biscuit-haskell#readme>
@@ -10,10 +10,10 @@
 author:         Clément Delafargue
 maintainer:     clement@delafargue.name
 copyright:      2021 Clément Delafargue
-license:        BSD3
+license:        BSD-3-Clause
 license-file:   LICENSE
 build-type:     Simple
-tested-with:    GHC ==9.0.2 || ==9.2.4 || ==9.6.5 || ==9.8.2
+tested-with:    GHC ==9.8.4 || ==9.10.3 || ==9.12.4 || ==9.14.1
 extra-source-files:
     README.md
     ChangeLog.md
@@ -34,8 +34,8 @@
   ghc-options: -Wall
   build-depends:
     base                 >= 4.7 && <5,
-    biscuit-haskell      >= 0.4 && < 0.5,
-    bytestring           >= 0.10 && <0.12,
+    biscuit-haskell      >= 0.5 && < 0.6,
+    bytestring           >= 0.10 && <0.13,
     mtl                  >= 2.2 && < 2.4,
     text                 >= 1.2 && <3,
     servant-server       >= 0.18 && < 0.21,
diff --git a/src/Auth/Biscuit/Servant.hs b/src/Auth/Biscuit/Servant.hs
--- a/src/Auth/Biscuit/Servant.hs
+++ b/src/Auth/Biscuit/Servant.hs
@@ -5,6 +5,13 @@
 {-# LANGUAGE RankNTypes        #-}
 {-# LANGUAGE RecordWildCards   #-}
 {-# LANGUAGE TypeFamilies      #-}
+{-|
+  Module      : Auth.Biscuit.Datalog.AST
+  Copyright   : © Clément Delafargue, 2021
+  License     : BSD-3-Clause
+  Maintainer  : clement@delafargue.name
+  Servant support for biscuit
+-}
 module Auth.Biscuit.Servant
   (
   -- * Protecting a servant API with biscuits
@@ -199,7 +206,7 @@
 -- >          -- reachable with an admin biscuit
 -- >        . withFallbackAuthorizer [authorizer|allow if right("anon");|]
 -- >          -- ^ this policy will be tried /after/ the endpoints policies, so `endpoint3` will
--- >          -- *not* be reachable with an anon macaroon.
+-- >          -- *not* be reachable with a biscuit carrying a @right("anon")@ fact.
 -- >      handlers = handler1 :<|> handler2 :<|> handler3
 -- >   in hoistServer @ProtectedAPI Proxy handleAuth handlers
 -- >        -- ^ this will apply `handleAuth` on all 'ProtectedAPI' endpoints.
diff --git a/test/AppWithAuthorizer.hs b/test/AppWithAuthorizer.hs
--- a/test/AppWithAuthorizer.hs
+++ b/test/AppWithAuthorizer.hs
@@ -5,6 +5,10 @@
 {-# LANGUAGE TypeApplications  #-}
 {-# LANGUAGE TypeFamilies      #-}
 {-# LANGUAGE TypeOperators     #-}
+{-
+  Copyright   : © Clément Delafargue, 2021
+  License     : BSD-3-Clause
+-}
 module AppWithAuthorizer where
 
 import           Auth.Biscuit
diff --git a/test/ClientHelpers.hs b/test/ClientHelpers.hs
--- a/test/ClientHelpers.hs
+++ b/test/ClientHelpers.hs
@@ -2,6 +2,10 @@
 {-# LANGUAGE NamedFieldPuns    #-}
 {-# LANGUAGE OverloadedStrings #-}
 {-# LANGUAGE TypeFamilies      #-}
+{-
+  Copyright   : © Clément Delafargue, 2021
+  License     : BSD-3-Clause
+-}
 module ClientHelpers where
 
 import           Data.Bifunctor           (first)
diff --git a/test/Spec.hs b/test/Spec.hs
--- a/test/Spec.hs
+++ b/test/Spec.hs
@@ -4,6 +4,10 @@
 {-# LANGUAGE TypeApplications  #-}
 {-# LANGUAGE TypeFamilies      #-}
 {-# LANGUAGE TypeOperators     #-}
+{-
+  Copyright   : © Clément Delafargue, 2021
+  License     : BSD-3-Clause
+-}
 module Main (main) where
 
 import           Auth.Biscuit