Bump pandoc-citeproc upper bound