Bump text, random, http-client upper bounds

Allow `pandoc` to use the latest versions of `text`, `random`, and `http-client`.