diff --git a/CHANGELOG.md b/CHANGELOG.md
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.3.0.1 — 2026-10-30
+
+### Bug Fixes
+
+- Accept `http-client-tls >=0.3 && <0.5` in library and test dependencies.
+  The remote client uses the unchanged `tlsManagerSettings` API; this permits
+  consumers selecting 0.4.0 without `allow-newer`.
+
 ## 0.3.0.0 — 2026-10-28
 
 ### Breaking Changes
diff --git a/kiroku-cli.cabal b/kiroku-cli.cabal
--- a/kiroku-cli.cabal
+++ b/kiroku-cli.cabal
@@ -1,6 +1,6 @@
 cabal-version:   3.0
 name:            kiroku-cli
-version:         0.3.0.0
+version:         0.3.0.1
 synopsis:        Embeddable operator CLI for Kiroku
 description:
   Parser, runner, and executable entry points for Kiroku operator commands.
@@ -49,7 +49,7 @@
     , containers            >=0.6       && <0.8
     , generic-lens          >=2.2       && <2.4
     , http-client           >=0.7       && <0.8
-    , http-client-tls       >=0.3       && <0.4
+    , http-client-tls       >=0.3       && <0.5
     , http-types            >=0.12      && <0.13
     , kiroku-store          ^>=0.13.0.0
     , lens                  >=5.2       && <5.4
@@ -85,7 +85,7 @@
     , generic-lens          >=2.2       && <2.4
     , hspec                 >=2.10      && <2.12
     , http-client           >=0.7       && <0.8
-    , http-client-tls       >=0.3       && <0.4
+    , http-client-tls       >=0.3       && <0.5
     , kiroku-cli
     , kiroku-store          ^>=0.13.0.0
     , kiroku-test-support