Bump Cabal upper bound (#651)