diff --git a/ChangeLog.md b/ChangeLog.md
--- a/ChangeLog.md
+++ b/ChangeLog.md
@@ -1,5 +1,18 @@
 See also http://pvp.haskell.org/faq
 
+0.6.3.0
+-------
+
+* Make `lukko` flag automatic and off by default, using file locking
+  facilities from `GHC.IO.Handle.Lock` and not from
+  on [`lukko` package](https://hackage.haskell.org/package/lukko).
+  The change is not expected to affect anyone detrimentally,
+  but one can set the flag on in their configuration to restore
+  the previous behaviour.
+* Allow building against newer releases of dependencies.
+* Tested with GHC 8.4 - 9.12.
+
+
 0.6.2.6
 -------
 
diff --git a/hackage-security.cabal b/hackage-security.cabal
--- a/hackage-security.cabal
+++ b/hackage-security.cabal
@@ -1,6 +1,6 @@
 cabal-version:       1.12
 name:                hackage-security
-version:             0.6.2.6
+version:             0.6.3.0
 
 synopsis:            Hackage security library
 description:         The hackage security library provides both server and
@@ -31,8 +31,10 @@
 build-type:          Simple
 
 tested-with:
-  GHC == 9.8.2
-  GHC == 9.6.4
+  GHC == 9.12.2
+  GHC == 9.10.1
+  GHC == 9.8.4
+  GHC == 9.6.7
   GHC == 9.4.8
   GHC == 9.2.8
   GHC == 9.0.2
@@ -55,8 +57,8 @@
 
 flag lukko
   description: Use @lukko@ for file-locking, otherwise use @GHC.IO.Handle.Lock@
-  manual:      True
-  default:     True
+  manual:      False
+  default:     False
 
 library
   -- Most functionality is exported through the top-level entry points .Client
@@ -104,7 +106,7 @@
                        Hackage.Security.Util.Stack
                        Hackage.Security.Util.TypedEmbedded
 
-  build-depends:       base              >= 4.11     && < 4.20,
+  build-depends:       base              >= 4.11     && < 4.22,
                        base16-bytestring >= 0.1.1    && < 1.1,
                        base64-bytestring >= 1.0      && < 1.3,
                        bytestring        >= 0.10.8.2 && < 0.13,
@@ -112,21 +114,21 @@
                        cryptohash-sha256 >= 0.11     && < 0.12,
                        directory         >= 1.3.1.5  && < 1.4,
                        ed25519           >= 0.0      && < 0.1,
-                       filepath          >= 1.4.2    && < 1.5,
+                       filepath          >= 1.4.2    && < 1.6,
                        mtl               >= 2.2.2    && < 2.4,
                        network-uri       >= 2.6      && < 2.7,
-                       network           >= 2.6      && < 3.2,
+                       network           >= 2.6      && < 3.3,
                        parsec            >= 3.1.13   && < 3.2,
                        pretty            >= 1.0      && < 1.2,
                        -- 0.4.2 introduces TarIndex, 0.4.4 introduces more
                        -- functionality, 0.5.0 changes type of serialise
                        tar               >= 0.5      && < 0.7,
-                       template-haskell  >= 2.13     && < 2.22,
-                       time              >= 1.8.0.2  && < 1.13,
+                       template-haskell  >= 2.13     && < 2.24,
+                       time              >= 1.8.0.2  && < 1.15,
                        transformers      >= 0.3      && < 0.7,
                        zlib              >= 0.5      && < 0.8,
                        -- whatever versions are bundled with ghc:
-                       ghc-prim          >= 0.5.2    && < 0.12
+                       ghc-prim          >= 0.5.2    && < 0.14
 
   if flag(lukko)
     build-depends:     lukko      >= 0.1     && < 0.2
@@ -134,7 +136,7 @@
     build-depends:     base       >= 4.11
 
   if flag(Cabal-syntax)
-    build-depends: Cabal-syntax >= 3.7 && < 3.14
+    build-depends: Cabal-syntax >= 3.7 && < 3.16
   else
     build-depends: Cabal        >= 2.2.0.1 && < 2.6
                              || >= 3.0     && < 3.7,
@@ -199,23 +201,23 @@
                        zlib
 
   if flag(Cabal-syntax)
-    build-depends: Cabal        >= 3.7 && < 3.14,
-                   Cabal-syntax >= 3.7 && < 3.14
+    build-depends: Cabal        >= 3.7 && < 3.16,
+                   Cabal-syntax >= 3.7 && < 3.16
   else
     build-depends: Cabal        >= 2.2.0.1 && < 2.6
                              || >= 3.0     && < 3.7,
                    Cabal-syntax <  3.7
 
   -- dependencies exclusive to test-suite
-  build-depends:       tasty            >= 1.1.0.4 && < 1.6,
+  build-depends:       tasty                 >= 1.1.0.4  && < 1.6,
                          -- tasty-1.1.0.4 is the version in Stackage LTS 12.26 (GHC 8.4)
-                       tasty-hunit      == 0.10.*,
-                       tasty-quickcheck == 0.10.*,
-                       QuickCheck       >= 2.11 && <2.15,
-                       aeson            >= 1.4 && < 1.6 || >= 2.0 && < 2.3,
-                       vector           >= 0.12 && <0.14,
-                       unordered-containers >=0.2.8.0 && <0.3,
-                       temporary        >= 1.2 && < 1.4
+                       tasty-hunit           == 0.10.*,
+                       tasty-quickcheck      >= 0.10     && < 1,
+                       QuickCheck            >= 2.11     && < 2.16,
+                       aeson                 >= 1.4      && < 1.6 || >= 2.0 && < 2.3,
+                       vector                >= 0.12     && < 0.14,
+                       unordered-containers  >= 0.2.8.0  && < 0.3,
+                       temporary             >= 1.2      && < 1.4
 
   hs-source-dirs:      tests
   default-language:    Haskell2010