diff --git a/changelog.md b/changelog.md
--- a/changelog.md
+++ b/changelog.md
@@ -7,4 +7,7 @@
 ## 1.0.0.1 - 2019-05-18
 
 - Replace `hex-text` package dependency with slightly smaller `base16-bytestring` dependency
- 
+
+## 1.0.0.2 - 2020-04-18
+
+Tightened dependency version bounds
diff --git a/stripe-signature.cabal b/stripe-signature.cabal
--- a/stripe-signature.cabal
+++ b/stripe-signature.cabal
@@ -1,5 +1,5 @@
 name: stripe-signature
-version: 1.0.0.1
+version: 1.0.0.2
 
 synopsis: Verification of Stripe webhook signatures
 category: Web
@@ -17,13 +17,13 @@
 author:     Chris Martin
 maintainer: Chris Martin, Julie Moronuki
 
-copyright: 2018 Typeclass Consulting, LLC
+copyright: 2019 Typeclass Consulting, LLC
 license: MIT
 license-file: license.txt
 
 build-type: Simple
 cabal-version: >=1.10
-tested-with: GHC==8.2.2, GHC==8.4.4, GHC==8.6.3
+tested-with: GHC==8.2.2, GHC==8.4.4, GHC==8.6.3, GHC==8.8.1
 
 extra-source-files:
     changelog.md
@@ -36,13 +36,13 @@
         Stripe.Signature
 
     build-depends:
-        base >=4.10 && <5
-      , base16-bytestring
-      , bytestring
-      , cryptonite
-      , memory
-      , stripe-concepts
-      , text
+        base >=4.10 && <4.14
+      , base16-bytestring >= 0.1 && <0.2
+      , bytestring >=0.10 && <0.11
+      , cryptonite >=0.25 && <0.27
+      , memory >=0.14 && <0.16
+      , stripe-concepts >=1.0 && <1.1
+      , text >=1.2 && <1.3
 
 test-suite test
     default-language: Haskell2010
@@ -52,7 +52,7 @@
     ghc-options: -threaded
 
     build-depends:
-        base >=4.10 && <5
-      , bytestring
+        base >=4.10 && <4.14
+      , bytestring >=0.10 && <0.11
       , stripe-signature
-      , text
+      , text >=1.2 && <1.3