Bump up base & sdl2 version bounds