upper bound dependency versions (#560)

Author: gruebel

.github/PULL_REQUEST_TEMPLATE

@@ -10,5 +10,5 @@ multiple changes are involved, a bulleted list is often useful.)
 ## Completion checklist
 
 - [ ] Additions and changes have unit tests
-- [ ] [Unit tests, Pylint, security testing, and Integration tests are passing.](https://github.com/salesforce/policy_sentry/actions). GitHub actions does this automatically
+- [ ] pre-commit hooks and tests are passing
 - [ ] The pull request has been appropriately labeled using the provided PR labels

Makefile

@@ -6,9 +6,14 @@ build-docs:
     mkdocs build
 
 [group('package')]
-build-package:
+build-package: clean
     uv build
 
+[group('package')]
+clean:
+    rm -rf dist/
+    rm -rf *.egg-info
+
 [group('docker')]
 docker-build:
     docker build -t policy_sentry .

justfile

@@ -23,12 +23,12 @@ readme = "README.md"
 requires-python = ">=3.10"
 
 dependencies = [
-    "beautifulsoup4>=4.14.0",
-    "click>=8.1.0",
-    "requests>=2.32.0",
-    "schema>=0.7.0",
-    "PyYAML>=6.0.0",
-    "orjson>=3.11.0",
+    "beautifulsoup4>=4.14.0,<5.0.0",
+    "click>=8.1.0,<9.0.0",
+    "requests>=2.32.0,<3.0.0",
+    "schema>=0.7.0,<0.8.0",
+    "PyYAML>=6.0.0,<7.0.0",
+    "orjson>=3.11.0,<4.0.0",
 ]
 
 [project.scripts]
@@ -44,14 +44,14 @@ Twitter = "https://twitter.com/kmcquade3"
 
 [dependency-groups]
 dev = [
-    "coverage>=7.11.0",
-    "mypy>=1.18.0",
+    "coverage>=7.11.0,<8.0.0",
+    "mypy>=1.18.0,<2.0.0",
     "prek>=0.2.10,<0.3.0",
-    "pytest>=8.4.0",
-    "rust-just>=1.43.0",
-    "types-beautifulsoup4>=4.12.0",
-    "types-pyyaml>=6.0.12",
-    "types-requests>=2.32.4",
+    "pytest>=8.4.0,<9.0.0",
+    "rust-just>=1.43.0,<2.0.0",
+    "types-beautifulsoup4>=4.12.0,<5.0.0",
+    "types-pyyaml>=6.0.12,<7.0.0",
+    "types-requests>=2.32.4,<3.0.0",
 ]
 
 docs = [