Put an upper bound on http-conduit version