Pin Dependencies

[stv8]

Via Pallets Discord suggestion

Also might want to use something like uv or pip-compile to pin deps pip-compile is the standard, but I don't want to add another step for now

[ThiefMaster]

We're talking about build/dev dependencies, right? Because a library should not be pinning any runtime dependencies.

[stv8]

Yes build dependencies i.e. the deps in requirements/test.txt

But please let me know if that is not advisable!