diff --git a/build-constraints.yaml b/build-constraints.yaml
index 2da9850a..51a8512c 100644
--- a/build-constraints.yaml
+++ b/build-constraints.yaml
@@ -1587,7 +1587,7 @@ packages:
     "Toralf Wittner <tw@dtex.org> @twittner":
         - bytestring-conversion
         - cql
-        - cql-io
+        - cql-io < 0 # depends on removed cryptonite internally
         - redis-resp
         - redis-io
         - swagger