bump restrictive dependencies
Merge pull request #489 from maxsnew/cabal

Bump restrictive dependencies