cabal deps bounds