Why has coverage been locked to `==4.0.3` for two years? Why not `>=4.0.0`?

If I add localstack to my pipenv, I can't lock because of this unnecessary dependency.
text = text.decode('utf-8', CODEC_HANDLER_UNDERSCORE)
    
    text = text.encode('ascii', CODEC_HANDLER_UNDERSCORE)
    return text
class NetrcBypassAuth(requests.auth.AuthBase):
    def __call__(self, r):
        return r
class _RequestsSafe(type):
    """ Wrapper around requests library, which can prevent it from verifying
    SSL certificates or reading credentials from ~/.netrc file """
    verify_ssl = True
    def __getattr__(self, name):
        method = requests.__dict__.get(name.lower())
        if not method:
            return method
        def _wrapper(*args, **kwargs):
            if 'auth' not in kwargs:
                kwargs['auth'] = NetrcBypassAuth()
            if not self.verify_ssl and args[0].startswith('https://') and 'verify' not in kwargs:
                kwargs['verify'] = False
            return method(*args, **kwargs)
        return _wrapper
class safe_requests(with_metaclass(_RequestsSafe)):
    pass
def make_http_request(url, data=None, headers=None, method='GET'):
    if is_string(method):
        method = requests.__dict__[method.lower()]
    return method(url, headers=headers, data=data, auth=NetrcBypassAuth(), verify=False)
def clean_cache(file_pattern=CACHE_FILE_PATTERN,