diff --git a/CHANGELOG.md b/CHANGELOG.md
index 95a3b83..94fb3be 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,16 @@
 ## Unreleased
 
 
+## 1.5.4
+### Added
+- py3.11 support
+- py3.12 support
+### Fixed
+- new confu circular import
+### Removed
+- py3.7 support
+
+
 ## 1.5.3
 ### Fixed
 - pin Flask to < 2.2 until compatibility isuses are resolved
diff --git a/CHANGELOG.yaml b/CHANGELOG.yaml
index ab12e1f..c91da28 100644
--- a/CHANGELOG.yaml
+++ b/CHANGELOG.yaml
@@ -1,13 +1,18 @@
 Unreleased:
-  added:
-  - py3.11 support
-  - py3.12 support
+  added: []
   fixed: []
   changed: []
   deprecated: []
+  removed: []
+  security: []
+1.5.4:
+  added:
+  - py3.11 support
+  - py3.12 support
+  fixed:
+  - new confu circular import
   removed:
   - py3.7 support
-  security: []
 1.5.3:
   fixed:
   - pin Flask to < 2.2 until compatibility isuses are resolved
diff --git a/pyproject.toml b/pyproject.toml
index c331078..826d9ad 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -52,8 +52,8 @@ rrdtool = { version = ">=0.1.14, <1", optional = true }
 prometheus_client = { version = ">=0.11.0", optional = true }
 
 # standalone
-graphsrv = { version = ">=2", optional = true }
-vodka = { version = ">=3.1", optional = true }
+graphsrv = { version = "^2", optional = true }
+vodka = { version = "^3.1", optional = true }
 # FIXME: wekzeug >2.1.0 breaks static file serving
 Werkzeug = { version = ">2,<2.1.0", optional = true }
 Flask = { version = ">2,<2.2", optional = true }