Relent on the pinned versions policy

[agronholm]

Pinning versions in a library is a very bad practice. It disallows users from installing even patch releases. I request that you instead specify minimum versions and, depending on the policy of each library dependency, specify a maximum version if warranted. For example, with anyio the dependency should probably be ~= 1.2 to avoid installing 2.X.