yesod-core-1.7.0.0

yesod-core-1.7.0.0 ([changelog](http://hackage.haskell.org/package/yesod-core-1.7.0.0/changelog)) (Grandfathered dependencies) is out of bounds for:
- [x] hledger-web-1.52.1 (>=1.4 && < 1.7). Simon Michael @simonmichael. Used by: library
- [ ] serversession-frontend-yesod-1.0.1 (>=1.6 && < 1.7). Felipe Lessa @meteficha. Used by: library
- [ ] yesod-alerts-0.1.5.0 (>=1.4.32 && < 1.7). Daniel Campoverde @alx741. Used by: library
- [ ] yesod-auth-hashdb-1.7.1.7 (>=1.4.19 && < 1.7). Paul Rouse @paul-rouse. Used by: library
- [ ] yesod-csp-0.2.7.1 (>=1.6.25 && < 1.7). Bob Long @bobjflong. Used by: library
- [ ] yesod-eventsource-1.6.0.1 (>=1.6 && < 1.7). Michael Snoyman michael@snoyman.com @snoyberg. Used by: library
- [ ] yesod-gitrepo-0.3.0 (>=1.6 && < 1.7). Michael Snoyman michael@snoyman.com @snoyberg. Used by: library
- [x] yesod-newsfeed-1.7.0.0 (>=1.6 && < 1.7). Michael Snoyman michael@snoyman.com @snoyberg. Used by: library
- [x] yesod-sitemap-1.6.0 (>=1.6 && < 1.7). Michael Snoyman michael@snoyman.com @snoyberg. Used by: library

Will place an upper bound on yesod-core for now.

Start with the linked yesod-core 1.7.0.0 changelog and the unchecked package entries: serversession-frontend-yesod, yesod-alerts, yesod-auth-hashdb, yesod-csp, yesod-eventsource, and yesod-gitrepo. Determine whether each dependency bound can support yesod-core 1.7; done means the affected entries are resolved or the stated upper bound is applied.

Written by the indexing model from the issue text.