Bump dependency upper bounds: aeson, attoparsec, text