diff --git a/History.md b/History.md
index c234f529cea..4d7abc37205 100644
--- a/History.md
+++ b/History.md
@@ -1,3 +1,8 @@
+UNRELEASED
+==========
+
+  * deps: use tilde notation for dependencies
+
 4.21.2 / 2024-11-06
 ==========
 
diff --git a/package.json b/package.json
index f0db3d8b9f2..75c520b80b8 100644
--- a/package.json
+++ b/package.json
@@ -34,32 +34,32 @@
   "dependencies": {
     "accepts": "~1.3.8",
     "array-flatten": "1.1.1",
-    "body-parser": "1.20.3",
-    "content-disposition": "0.5.4",
+    "body-parser": "~1.20.3",
+    "content-disposition": "~0.5.4",
     "content-type": "~1.0.4",
-    "cookie": "0.7.1",
-    "cookie-signature": "1.0.6",
+    "cookie": "~0.7.1",
+    "cookie-signature": "~1.0.6",
     "debug": "2.6.9",
     "depd": "2.0.0",
     "encodeurl": "~2.0.0",
     "escape-html": "~1.0.3",
     "etag": "~1.8.1",
-    "finalhandler": "1.3.1",
-    "fresh": "0.5.2",
-    "http-errors": "2.0.0",
+    "finalhandler": "~1.3.1",
+    "fresh": "~0.5.2",
+    "http-errors": "~2.0.0",
     "merge-descriptors": "1.0.3",
     "methods": "~1.1.2",
-    "on-finished": "2.4.1",
+    "on-finished": "~2.4.1",
     "parseurl": "~1.3.3",
-    "path-to-regexp": "0.1.12",
+    "path-to-regexp": "~0.1.12",
     "proxy-addr": "~2.0.7",
     "qs": "6.13.0",
     "range-parser": "~1.2.1",
     "safe-buffer": "5.2.1",
-    "send": "0.19.0",
-    "serve-static": "1.16.2",
+    "send": "~0.19.0",
+    "serve-static": "~1.16.2",
     "setprototypeof": "1.2.0",
-    "statuses": "2.0.1",
+    "statuses": "~2.0.1",
     "type-is": "~1.6.18",
     "utils-merge": "1.0.1",
     "vary": "~1.1.2"