My impression is that the Python ecosystem rarely specifies upperbounds on dependencies even if they follow semver. In the Julia ecosystem it's the default, an

My impression is that the Python ecosystem rarely specifies upperbounds on dependencies even if they follow semver. In the Julia ecosystem it's the default, and you basically have to release a new patch version for updated compat bounds with your dependencies. This is much more stable. It works because the process is mostly automated: dependency releases new version => a bot opens a PR on your repo updating the compat bound, you just merge it.