diff --git a/cabal.project b/cabal.project
index 76fcc564b6..3cc0ad6b16 100644
--- a/cabal.project
+++ b/cabal.project
@@ -18,18 +18,22 @@ package cryptostore
 
 constraints: zip +disable-bzip2 +disable-zstd
 
--- The pinned forks retain the GHC 9.6 boot-library and compiler-helper
--- bounds. Limit the exceptions to those forks and libraries; other bounds
+-- Pinned packages retain older boot-library and compiler-helper bounds.
+-- Limit the exceptions to those packages and libraries; other bounds
 -- still constrain the GHC 9.14 plan.
 allow-newer:
     android-support:base,
+    network-transport:hashable,
     simplexmq:bytestring,
     simplexmq:containers,
     simplexmq:constraints,
     simplexmq:deepseq,
     simplexmq:filepath,
+    simplexmq:hashable,
+    simplexmq:scientific,
     simplexmq:template-haskell,
     simplexmq:time,
+    simplexmq:websockets,
     aeson:containers,
     aeson:ghc-prim,
     aeson:hashable,
@@ -37,6 +41,7 @@ allow-newer:
     aeson:template-haskell,
     aeson:th-abstraction,
     aeson:time,
+    aeson:witherable,
     zip:containers,
     zip:time
 
diff --git a/simplex-chat.cabal b/simplex-chat.cabal
index 861d2a988f..f647b7a6e5 100644
--- a/simplex-chat.cabal
+++ b/simplex-chat.cabal
@@ -611,7 +611,7 @@ executable simplex-chat
     , simplexmq >=6.3
     , stm ==2.5.*
     , unliftio ==0.2.*
-    , websockets ==0.12.*
+    , websockets >=0.12 && <0.14
   default-language: Haskell2010
   if flag(client_postgres)
     cpp-options: -DdbPostgres