Updated cabal dependencies

Patch is self-explanatory.

< allows more than == but I think it's better to allow different versions.