diff --git a/CHANGES.md b/CHANGES.md
index 54e3fa8..605dfad 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -3,7 +3,7 @@
 ## 2.1.2 (not yet released)
 
 - #41 Add compatibility with ed25519 keys in ssh-agent
-
+- #42 Tools using sshpk should lock in an exact version
 
 ## 2.1.1
 
diff --git a/package.json b/package.json
index 57f7b2c..e25c0bb 100644
--- a/package.json
+++ b/package.json
@@ -18,8 +18,8 @@
     "read": "1.0.7",
     "restify-clients": "1.1.0",
     "restify-errors": "3.0.0",
-    "sshpk": "1.4.0",
-    "smartdc-auth": "2.1.3",
+    "sshpk": "1.4.4",
+    "smartdc-auth": "2.1.5",
     "strsplit": "1.0.0",
     "tabula": "1.6.1",
     "tilde-expansion": "0.0.0",