Bump lens upper version bounds

Allow `active` to use the latest version of `lens` (4.5).