Restore upper bounds on base

Hackage refuses packages without upper bounds on base