ci: lock versions on minor instead of patch

[pedronauck]

⭐ Closes #10

The idea here is lock all dependencies in minor instead of patch to avoid an extra step when getting security updates.