diff --git a/CHANGELOG.md b/CHANGELOG.md
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,10 @@
-## [*Unreleased*](https://github.com/thoughtbot/yesod-auth-oauth2/compare/v0.6.1.3...master)
+## [*Unreleased*](https://github.com/thoughtbot/yesod-auth-oauth2/compare/v0.6.1.4...master)
 
 None
+
+## [v0.6.1.4](https://github.com/thoughtbot/yesod-auth-oauth2/compare/v0.6.1.3...v0.6.1.4)
+
+- Tighten upper bound on hoauth2
 
 ## [v0.6.1.3](https://github.com/thoughtbot/yesod-auth-oauth2/compare/v0.6.1.2...v0.6.1.3)
 
diff --git a/yesod-auth-oauth2.cabal b/yesod-auth-oauth2.cabal
--- a/yesod-auth-oauth2.cabal
+++ b/yesod-auth-oauth2.cabal
@@ -4,10 +4,10 @@
 --
 -- see: https://github.com/sol/hpack
 --
--- hash: a7a343fd632bb3c2411438ac0220b2a3c5071b5d28da37e807beedbcac6eca1f
+-- hash: e7ae534f10b6ab3a73cef745b8a57142ae8fb00183d08eaf18d7a5d340ccf2bf
 
 name:           yesod-auth-oauth2
-version:        0.6.1.3
+version:        0.6.1.4
 synopsis:       OAuth 2.0 authentication plugins
 description:    Library to authenticate with OAuth 2.0 for Yesod web applications.
 category:       Web
@@ -63,7 +63,7 @@
     , bytestring >=0.9.1.4
     , cryptonite
     , errors
-    , hoauth2 >=1.7.0 && <1.15
+    , hoauth2 >=1.7.0 && <1.9
     , http-client >=0.4.0 && <0.7
     , http-conduit >=2.0 && <3.0
     , http-types >=0.8 && <0.13