Bump upper bounds on dependencies