diff --git a/CHANGELOG.md b/CHANGELOG.md
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,7 @@
+## Changes in 0.39.3
+  - Add upper bound `crypton < 1.1`, as dependency `http-client-tls <= 0.3.6.4`
+    does not support `crypton-1.1.0` but does not itself have an upper bound.
+
 ## Changes in 0.39.2
   - Depend on `cryptohash-sha256`, rather than `crypton`, for SHA256 hashes
 
diff --git a/hpack.cabal b/hpack.cabal
--- a/hpack.cabal
+++ b/hpack.cabal
@@ -5,7 +5,7 @@
 -- see: https://github.com/sol/hpack
 
 name:           hpack
-version:        0.39.2
+version:        0.39.3
 synopsis:       A modern format for Haskell packages
 description:    See README at <https://github.com/sol/hpack#readme>
 category:       Development
@@ -72,6 +72,7 @@
     , bytestring
     , containers
     , cryptohash-sha256
+    , crypton <1.1
     , deepseq
     , directory >=1.2.5.0
     , filepath
@@ -106,6 +107,7 @@
     , bytestring
     , containers
     , cryptohash-sha256
+    , crypton <1.1
     , deepseq
     , directory >=1.2.5.0
     , filepath
@@ -204,6 +206,7 @@
     , bytestring
     , containers
     , cryptohash-sha256
+    , crypton <1.1
     , deepseq
     , directory >=1.2.5.0
     , filepath
diff --git a/resources/test/hpack.cabal b/resources/test/hpack.cabal
--- a/resources/test/hpack.cabal
+++ b/resources/test/hpack.cabal
@@ -5,7 +5,7 @@
 -- see: https://github.com/sol/hpack
 
 name:           hpack
-version:        0.39.2
+version:        0.39.3
 synopsis:       A modern format for Haskell packages
 description:    See README at <https://github.com/sol/hpack#readme>
 category:       Development
@@ -72,6 +72,7 @@
     , bytestring
     , containers
     , cryptohash-sha256
+    , crypton <1.1
     , deepseq
     , directory >=1.2.5.0
     , filepath
@@ -106,6 +107,7 @@
     , bytestring
     , containers
     , cryptohash-sha256
+    , crypton <1.1
     , deepseq
     , directory >=1.2.5.0
     , filepath
@@ -204,6 +206,7 @@
     , bytestring
     , containers
     , cryptohash-sha256
+    , crypton <1.1
     , deepseq
     , directory >=1.2.5.0
     , filepath
