upper bound on base package version
fixes for hackage