bump cabal dependency versions