Pinned dependencies

[jnnr]

Some of the dependencies are pinned to a version. This causes dependabot to complain, as it cannot install a newer version of numpy that has important security fixes. Have we pinned this for a specific purpose, @henhuy? Can we set more permissive constraints on the version?

https://github.com/rl-institut/oemof-B3/blob/0f8de8229a9cfeaba96be7b4f256ddd1a8136cda/pyproject.toml#L23-L25

[henhuy]

Hmm. Should have made a comment behind it, explaining why some stuff is pinnend. I'm pretty sure that pinning numpy and pyyaml happend for a reason - but unfortunately I'm not 100% sure. Can't remember pinning rtree though.

[jnnr]

• Numpy was set here https://github.com/rl-institut/oemof-B3/commit/d13f1cd21dc694ed4f6b636543405e6fc8078dee and here https://github.com/rl-institut/oemof-B3/commit/790f6be0a120b2c43de215521776493b267ff0e9
• rtree and pyyaml was set here https://github.com/rl-institut/oemof-B3/commit/6208bb5c71f955ce13df8c2dd3743322e4754593