diff --git a/History.md b/History.md
index 77ef8ad37..6984095b3 100644
--- a/History.md
+++ b/History.md
@@ -2,7 +2,6 @@
 Unreleased, branch 0.9.x (maintenance)
 
 - filter falsey _npmUser values (issue [#95](https://github.com/rlidwka/sinopia/pull/95))
-- don't receive future updates to express.js (issue [#92](https://github.com/rlidwka/sinopia/issues/92))
 - option not to cache third-party files (issue [#85](https://github.com/rlidwka/sinopia/issues/85))
 
 26 Jul 2014, version 0.9.0
diff --git a/package.yaml b/package.yaml
index 4874d97d3..c4c05d722 100644
--- a/package.yaml
+++ b/package.yaml
@@ -18,11 +18,7 @@ bin:
   sinopia: ./bin/sinopia
 
 dependencies:
-  # don't receive future updates to express.js until
-  # https://github.com/strongloop/express/issues/2264
-  # gets resolved:
-  express: '>= 3.4.7 <= 3.15.2'
-
+  express: '>= 3.4.7 <= 4.0.0-0'
   commander: '>= 2.1.0'
   js-yaml: '>= 3.0.1'
   cookies: '>= 0.3.8'