update cabal upper bounds