diff --git a/CHANGELOG.md b/CHANGELOG.md
index 13b2450..04f6877 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -22,7 +22,7 @@
 
     ```
     Unhandled exception:
-    'file:///Users/mit/tmp/tool/bin/main.dart': Failed assertion: line 9 pos 10: 
+    'file:///Users/mit/tmp/tool/bin/main.dart': Failed assertion: line 9 pos 10:
     'configFile != null': Tool config missing. Please see https://goo.gl/k8iAi for details.
     #0      _AssertionError._doThrowNew (dart:core-patch/errors_patch.dart:33)
     #1      _AssertionError._throwNew (dart:core-patch/errors_patch.dart:29)
@@ -43,7 +43,7 @@
     globally-activated executables to consistently use the
     `Isolate.resolvePackageUri()` API.
 
-  * On POSIX systems, always ignore packages' original file owners and
+  * On Linux systems, always ignore packages' original file owners and
     permissions when extracting those packages. This was already the default
     under most circumstances.
 
@@ -54,6 +54,8 @@
     pubspec can't be parsed will now be ignored by `pub get --offline` and
     deleted by `pub cache repair`.
 
+  * Make `pub run` run executables in spawned isolates. This lets them handle
+    signals and use standard IO reliably.
 
 ## 1.21.0 - 2016-12-07
 
diff --git a/DEPS b/DEPS
index c896280..caf046e 100644
--- a/DEPS
+++ b/DEPS
@@ -92,7 +92,7 @@
   "ply_rev": "@604b32590ffad5cbb82e4afef1d305512d06ae93",
   "pool_tag": "@1.2.4",
   "protobuf_tag": "@0.5.3",
-  "pub_rev": "@d7649be15213c43669a40c33af516d8eb210e876",
+  "pub_rev": "@9000daf329445d06e2404d4bb9020cf742b7308a",
   "pub_semver_tag": "@1.3.0",
   "quiver_tag": "@0.22.0",
   "resource_rev":"@a49101ba2deb29c728acba6fb86000a8f730f4b1",