I never understood idea behind non exact version of dependencies. What’s to gain here? If I develop and test my app with given version I want it to run with given version. Not with something around, near by or similar. I want this exact version.
There’s no way you can predict that even a small bugfix in library won’t break your code.
Please just stop using all these lock files nonsense and allow only exact versions for dependencies. Use some upgrade tool like ncu to upgrade them quickly.
I wonder who has invented this stuff and why.