diff --git a/CHANGELOG.md b/CHANGELOG.md
index d100f4438aa..7ee438c47aa 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -57,6 +57,11 @@
   * `pub global run` now detects when a global executable's SDK constraint is no
     longer met and errors out, rather than trying to run the executable anyway.
 
+  * Pub commands that check whether the lockfile is up-to-date (`pub run`, `pub
+    deps`, `pub serve`, and `pub build`) now do additional verification. They
+    ensure that any path dependencies' pubspecs haven't been changed, and they
+    ensure that the current SDK version is compatible with all dependencies.
+
   * Fixed a crashing bug when using `pub global run` on a global script that
     didn't exist.
 
diff --git a/DEPS b/DEPS
index 45c157c6b0e..fbe59dc6d47 100644
--- a/DEPS
+++ b/DEPS
@@ -67,7 +67,7 @@ vars = {
   "ply_rev": "@604b32590ffad5cbb82e4afef1d305512d06ae93",
   "plugin_tag": "@0.1.0",
   "pool_tag": "@1.2.1",
-  "pub_rev": "@a1dd3484795b2bc221aaa8d007f3162251b3c08e",
+  "pub_rev": "@57a17f2567d1ff3325960d0960f939fa243b5fd7",
   "pub_cache_tag": "@v0.1.0",
   "pub_semver_tag": "@1.2.1",
   "quiver_tag": "@0.21.4",