Currently most dependencies are pinned pretty tightly. This package may end up being used in other libraries though (e.g. HomeAssistant) and should have as much range in it's dependencies as possible.
We need to have good tests and a test setup (likely sticking with tox) to validate that different versions still work, so the tests issue will need to be worked on and/or completed before this can be done