diff --git a/.github/workflows/bump.yml b/.github/workflows/bump.yml
new file mode 100644
index 0000000..5615012
--- /dev/null
+++ b/.github/workflows/bump.yml
@@ -0,0 +1,19 @@
+name: Create dependency bump PR
+on:
+  # allows manual triggering from https://github.com/../../actions/workflows/bump.yml
+  workflow_dispatch:
+  # runs weekly on Thursday at 8:00
+  schedule:
+    - cron: '0 8 * * 4'
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  bump:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: nomeata/haskell-bounds-bump-action@main
+      with:
+        test: false
diff --git a/quickjs-hs.cabal b/quickjs-hs.cabal
index f410653..416c731 100644
--- a/quickjs-hs.cabal
+++ b/quickjs-hs.cabal
@@ -1,5 +1,4 @@
-
-cabal-version:  1.12
+cabal-version:  2.0
 name:           quickjs-hs
 version:        0.1.2.4
 homepage:       https://github.com/goodlyrottenapple/quickjs-hs#readme
@@ -35,21 +34,21 @@ library
   hs-source-dirs:
       src
   build-depends:
-    aeson                >=2.0   && <2.2,
-    base                 >=4.11  && <5,
-    bytestring           >=0.10  && <0.12,
-    containers           >=0.5   && <0.7,
-    exceptions           >=0.8   && <0.11,
-    inline-c             >=0.5   && <0.10,
-    mtl                  >=2.2.2 && <2.4,
-    scientific           >=0.3.5 && <0.4,
-    string-conv          >=0.1.2 && <0.3,
-    text                 >=1.2.0 && <2.1,
-    time                 >=1.8   && <1.14,
-    transformers         >=0.5   && <0.7,
-    unliftio-core        >=0.1   && <0.3,
+    aeson >=2.0 && <2.3,
+    base >=4.11 && <5,
+    bytestring >=0.10 && <0.12 || ^>=0.12.1,
+    containers >=0.5 && <0.7 || ^>=0.7,
+    exceptions >=0.8 && <0.11,
+    inline-c >=0.5 && <0.10,
+    mtl >=2.2.2 && <2.4,
+    scientific >=0.3.5 && <0.4,
+    string-conv >=0.1.2 && <0.3,
+    text >=1.2.0 && <2.1 || ^>=2.1.1,
+    time >=1.8 && <1.14 || ^>=1.14,
+    transformers >=0.5 && <0.7,
+    unliftio-core >=0.1 && <0.3,
     unordered-containers >=0.2.8 && <0.3,
-    vector               >=0.12  && <0.14
+    vector >=0.12 && <0.14
 
   default-language: Haskell2010
   include-dirs: quickjs
@@ -76,15 +75,15 @@ test-suite quickjs-hs-test
   default-language: Haskell2010
   ghc-options:      -threaded -rtsopts -with-rtsopts=-N
   build-depends:
-      base
-    , quickjs-hs           -any
-    , aeson
-    , exceptions
-    , HUnit                >=1.6.0.0
-    , QuickCheck           >=2.9
-    , tasty                >=1.0
-    , tasty-hunit          >=0.10
-    , tasty-quickcheck     >=0.9
-    , text
-    , unordered-containers
-    , vector
+      base,
+      quickjs-hs,
+      aeson,
+      exceptions,
+      HUnit >=1.6.0.0,
+      QuickCheck >=2.9,
+      tasty >=1.0,
+      tasty-hunit >=0.10,
+      tasty-quickcheck >=0.9,
+      text,
+      unordered-containers,
+      vector