cabal: bump upper bounds -core, -lib, base, lens