fix(deps): stop Dependabot ratcheting dependency floors

.github/dependabot.yml

@@ -2,6 +2,11 @@ version: 2
 updates:
   - package-ecosystem: "uv"
     directory: "/"
+    # Only update uv.lock; never raise the abstract lower bounds in
+    # pyproject.toml. As a library we want a wide compatibility range for
+    # downstream consumers (e.g. Home Assistant), while still testing against
+    # the latest pinned versions via the lockfile.
+    versioning-strategy: lockfile-only
     schedule:
       interval: "weekly"
       time: "08:00"

pyproject.toml

@@ -14,15 +14,15 @@ packages = [
     { include = "pyoverkiz" }
 ]
 dependencies = [
-    "aiohttp>=3.14.0,<4.0.0",
+    "aiohttp>=3.10.3,<4.0.0",
     "backoff<3.0,>=1.10.0",
     "attrs>=22.2",
     "cattrs>=23.2",
 ]
 
 [project.optional-dependencies]
 nexity = [
-    "boto3>=1.43.22,<2.0.0",
+    "boto3>=1.18.59,<2.0.0",
     "warrant-lite<2.0.0,>=1.0.4",
 ]
 docs = [