diff --git a/examples/custom-ipld-formats/package.json b/examples/custom-ipld-formats/package.json
index 1eff93f731..44caaf8fbc 100644
--- a/examples/custom-ipld-formats/package.json
+++ b/examples/custom-ipld-formats/package.json
@@ -11,7 +11,7 @@
     "test-ipfs-example": "^2.0.3"
   },
   "dependencies": {
-    "cids": "^1.0.0",
+    "cids": "1.0.2",
     "ipfs-cli": "^0.1.0",
     "ipfs-core": "^0.2.1",
     "ipfs-http-client": "^48.1.1",
diff --git a/packages/interface-ipfs-core/package.json b/packages/interface-ipfs-core/package.json
index ec0df71dc6..22deac5b3c 100644
--- a/packages/interface-ipfs-core/package.json
+++ b/packages/interface-ipfs-core/package.json
@@ -34,7 +34,7 @@
     "chai": "^4.2.0",
     "chai-as-promised": "^7.1.1",
     "chai-subset": "^1.6.0",
-    "cids": "^1.0.0",
+    "cids": "1.0.2",
     "delay": "^4.4.0",
     "dirty-chai": "^2.0.1",
     "err-code": "^2.0.3",
diff --git a/packages/ipfs-cli/package.json b/packages/ipfs-cli/package.json
index 5a07a23034..2939d078b4 100644
--- a/packages/ipfs-cli/package.json
+++ b/packages/ipfs-cli/package.json
@@ -32,7 +32,7 @@
     "bignumber.js": "^9.0.0",
     "byteman": "^1.3.5",
     "cid-tool": "^1.0.0",
-    "cids": "^1.0.0",
+    "cids": "1.0.2",
     "debug": "^4.1.1",
     "err-code": "^2.0.3",
     "execa": "^5.0.0",
diff --git a/packages/ipfs-core-utils/package.json b/packages/ipfs-core-utils/package.json
index db583a2ca9..57e2aa3361 100644
--- a/packages/ipfs-core-utils/package.json
+++ b/packages/ipfs-core-utils/package.json
@@ -41,7 +41,7 @@
     "any-signal": "^2.0.0",
     "blob-to-it": "^1.0.1",
     "browser-readablestream-to-it": "^1.0.1",
-    "cids": "^1.0.0",
+    "cids": "1.0.2",
     "err-code": "^2.0.3",
     "ipfs-utils": "^5.0.0",
     "it-all": "^1.0.4",
diff --git a/packages/ipfs-core/.aegir.js b/packages/ipfs-core/.aegir.js
index a11af408f4..5b46973aa3 100644
--- a/packages/ipfs-core/.aegir.js
+++ b/packages/ipfs-core/.aegir.js
@@ -8,7 +8,7 @@ let preloadNode = MockPreloadNode.createNode()
 let ipfsdServer
 
 module.exports = {
-  bundlesize: { maxSize: '524kB' },
+  bundlesize: { maxSize: '550kB' },
   karma: {
     files: [{
       pattern: 'node_modules/interface-ipfs-core/test/fixtures/**/*',
diff --git a/packages/ipfs-core/package.json b/packages/ipfs-core/package.json
index a4269322a5..4266514814 100644
--- a/packages/ipfs-core/package.json
+++ b/packages/ipfs-core/package.json
@@ -57,7 +57,7 @@
     "array-shuffle": "^1.0.1",
     "bignumber.js": "^9.0.0",
     "cbor": "^5.1.0",
-    "cids": "^1.0.0",
+    "cids": "1.0.2",
     "class-is": "^1.1.0",
     "dag-cbor-links": "^2.0.0",
     "datastore-core": "^2.0.0",
@@ -107,7 +107,7 @@
     "multiaddr": "^8.0.0",
     "multiaddr-to-uri": "^6.0.0",
     "multibase": "^3.0.0",
-    "multicodec": "^2.0.1",
+    "multicodec": "2.0.4",
     "multihashing-async": "^2.0.1",
     "native-abort-controller": "~0.0.3",
     "p-queue": "^6.6.1",
diff --git a/packages/ipfs-http-client/package.json b/packages/ipfs-http-client/package.json
index 315abda5e0..7bc9f9a1dc 100644
--- a/packages/ipfs-http-client/package.json
+++ b/packages/ipfs-http-client/package.json
@@ -52,7 +52,7 @@
   "dependencies": {
     "any-signal": "^2.0.0",
     "bignumber.js": "^9.0.0",
-    "cids": "^1.0.0",
+    "cids": "1.0.2",
     "debug": "^4.1.1",
     "form-data": "^3.0.0",
     "ipfs-core-utils": "^0.5.3",
@@ -68,7 +68,7 @@
     "merge-options": "^2.0.0",
     "multiaddr": "^8.0.0",
     "multibase": "^3.0.0",
-    "multicodec": "^2.0.1",
+    "multicodec": "2.0.4",
     "multihashes": "^3.0.1",
     "nanoid": "^3.1.12",
     "native-abort-controller": "~0.0.3",
diff --git a/packages/ipfs-http-gateway/package.json b/packages/ipfs-http-gateway/package.json
index d5add58cc9..bd12d8d24f 100644
--- a/packages/ipfs-http-gateway/package.json
+++ b/packages/ipfs-http-gateway/package.json
@@ -32,7 +32,7 @@
     "@hapi/ammo": "^5.0.1",
     "@hapi/boom": "^9.1.0",
     "@hapi/hapi": "^20.0.0",
-    "cids": "^1.0.0",
+    "cids": "1.0.2",
     "debug": "^4.1.1",
     "hapi-pino": "^8.3.0",
     "ipfs-core-utils": "^0.5.3",
diff --git a/packages/ipfs-http-server/package.json b/packages/ipfs-http-server/package.json
index 23c1f2a4d5..25d2aae78b 100644
--- a/packages/ipfs-http-server/package.json
+++ b/packages/ipfs-http-server/package.json
@@ -32,7 +32,7 @@
     "@hapi/boom": "^9.1.0",
     "@hapi/content": "^5.0.2",
     "@hapi/hapi": "^20.0.0",
-    "cids": "^1.0.0",
+    "cids": "1.0.2",
     "debug": "^4.1.1",
     "dlv": "^1.1.3",
     "err-code": "^2.0.3",
diff --git a/packages/ipfs-message-port-protocol/package.json b/packages/ipfs-message-port-protocol/package.json
index 4ca7dafd92..e413fc3cf2 100644
--- a/packages/ipfs-message-port-protocol/package.json
+++ b/packages/ipfs-message-port-protocol/package.json
@@ -42,7 +42,7 @@
     "dep-check": "aegir dep-check -i typescript -i rimraf"
   },
   "dependencies": {
-    "cids": "^1.0.0",
+    "cids": "1.0.2",
     "ipld-block": "^0.11.0"
   },
   "devDependencies": {
diff --git a/packages/ipfs-message-port-server/package.json b/packages/ipfs-message-port-server/package.json
index 90cb15a2ee..80b0628369 100644
--- a/packages/ipfs-message-port-server/package.json
+++ b/packages/ipfs-message-port-server/package.json
@@ -50,7 +50,7 @@
   "devDependencies": {
     "@types/it-all": "^1.0.0",
     "aegir": "^29.2.2",
-    "cids": "^1.0.0",
+    "cids": "1.0.2",
     "ipfs-utils": "^5.0.0",
     "rimraf": "^3.0.2",
     "typescript": "4.0.x"