bump upper dependency bounds
link to puzzle-draw
warnings