fix: further loosened dependency definitions

see #44

updated some locked dependencies to latest versions

Signed-off-by: Jan Kowalleck <[email protected]>

Author: jkowalleck

poetry.lock

@@ -41,15 +41,18 @@ keywords = [
 "Bug Tracker" = "https://github.com/CycloneDX/cyclonedx-python-lib/issues"
 
 [tool.poetry.dependencies]
-# keep `requirements.lowest.txt` file in sync
+# ATTENTION: keep `requirements.lowest.txt` file in sync
 python = "^3.6"
-packageurl-python = ">= 0.3.0, < 0.10"
-requirements_parser = "^0.2.0"
-setuptools = ">=47.0.0, < 59.3"
-importlib-metadata = { version = ">= 3.4.0 < 4.9", python = "~3.6 | ~3.7" }
+packageurl-python = ">= 0.3"
+requirements_parser = ">= 0.2"
+setuptools = ">= 47.0.0"
+importlib-metadata = { version = ">= 3.4", python = "< 3.8" }
 toml = "^0.10.0"
-typing-extensions = { version = "^3.10.0", python = "~3.6 | ~3.7" }
-types-setuptools = ">= 57.0.0, < 57.5"
+# `typing-extensions` need to stay in sync with major version of `python`
+typing-extensions = { version = "^3.10", python = "< 3.8" }
+# `types-setuptools` need to stay in sync with version of `setuptools` - but 47 was not typed...
+types-setuptools = ">= 57.0.0"
+# `types-toml` need to stay in sync with version of `toml`
 types-toml = "^0.10.0"
 
 [tool.poetry.dev-dependencies]