I searched issues and couldn’t find anything (or linked relevant results below)
Problem
It is probably best to lock the packages in the requirements files to a specific version. No locking to specific version numbers can cause inconsistencies and incompatibility in the future.
Solution
Lock packages to specific versions that have been tested. With each boilerplate version iterations the version number may be upgraded after testing.
Alternatives
Testing can be done across different version but this will take too long in CI.