Tighten package version bounds

[adamgundry]

We should be more careful about version bounds, following the PVP and checking that the package (including tests) builds with the listed versions. In particular, it seems that QuickCheck changes may cause the test suite to fail to build under some circumstances.