S-6108 [Can't upload to hackage because of missing upper bounds]

[Vlix]

Error: [S-6108]
       unhandled status code: 400
       Upload failed on password-3.0.2.1.tar.gz
       "Error: Invalid package\n\nThe dependency 'setup-depends: 'Cabal' does not specify an upper bound on the version number. Each major release of the 'Cabal' package changes the API in various ways and most packages will need some changes to compile with it. If you are not sure what upper bound to use then use the next major version.\n"

Tried to stack upload the password package just now, and stack was blocking me from doing so, because the custom-setup stanza's setup-depends entries didn't have upper bounds.

So I've added <4 to Cabal, and <5 to base, and then it did work.

[david-christiansen]

This would be a great contribution to the index! The text that you've already written here is about half way to being documentation for S-6108 - all it needs is a bit more description of the error in general, and then a bit of text pointing at your example.