bump upper bounds
bump more upper bounds
cabal sandbox is boring