diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1b14f9d..816e879 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,11 @@
 
 All notable changes to this project will be documented in this file, in reverse chronological order by release.
 
+
+# [3.3.1](https://github.com/tuupola//slim-basic-auth/compare/3.3.0...3.x) - unreleased
+### Fixed
+- Bump minimum requirement of `tuupola/http-factory` to `1.0.2` . This is to avoid Composer 2 installing the broken `1.0.1` version which will also cause `psr/http-factory` to be removed. ([#103](https://github.com/tuupola/slim-basic-auth/pull/103))
+
 # [3.3.0](https://github.com/tuupola//slim-basic-auth/compare/3.2.1...3.3.0) - 2020-09-23
 
 ### Added
diff --git a/composer.json b/composer.json
index b69a371..df870b4 100644
--- a/composer.json
+++ b/composer.json
@@ -17,7 +17,7 @@
         "psr/http-message": "^1.0.1",
         "psr/http-server-middleware": "^1.0",
         "tuupola/callable-handler": "^0.3.0|^0.4.0|^1.0",
-        "tuupola/http-factory": "^0.4.0|^1.0"
+        "tuupola/http-factory": "^0.4.0|^1.0.2"
     },
     "autoload": {
         "psr-4": {