Update version bounds

This was triggered by #534 which showed that some lower bounds for `dlist` had bitrotted.

While at it, I empirically tested a few of the lower version bounds and tightened those that didn't make sense anymore (since we can't even test them with GHC 7.4+), and also set a couple of upper bounds for packages which have a history of avoiding major version increments until unavoidable.

Author: hvr

aeson.cabal

@@ -114,9 +114,9 @@ library
     attoparsec >= 0.13.0.1,
     base >= 4.5 && < 5,
     base-compat >= 0.9.1 && < 0.10,
-    containers >= 0.2.4.1,
-    deepseq >= 1.3,
-    dlist >= 0.2,
+    containers >= 0.4.2,
+    deepseq >= 1.3 && < 1.5,
+    dlist >= 0.6,
     ghc-prim >= 0.2,
     hashable >= 1.1.2.0,
     scientific >= 0.3.4.7 && < 0.4,
@@ -125,15 +125,15 @@ library
     text >= 1.1.1.0,
     time >= 1.1.1.4,
     time-locale-compat >= 0.1.1 && < 0.2,
-    unordered-containers >= 0.2.5.0,
+    unordered-containers >= 0.2.5.0 && < 0.3,
     uuid-types >= 1.0.3 && <1.1,
     vector >= 0.8
 
   if flag(bytestring-builder)
-    build-depends: bytestring >= 0.9 && < 0.10.4,
+    build-depends: bytestring >= 0.9.2 && < 0.10.4,
                    bytestring-builder >= 0.10.4 && < 1
   else
-    build-depends: bytestring >= 0.10.4
+    build-depends: bytestring >= 0.10.4 && < 0.11
 
   if !impl(ghc >= 8.0)
     -- `Data.Semigroup` and `Control.Monad.Fail` and `Control.Monad.IO.Class` are available in base only since GHC 8.0 / base 4.9