Relax upper bounds on dependencies

Relax upper bounds on `attoparsec` and `hs-src-exts`. This closes #37.