[deps] set upper version bounds

Pins the upper versions of our dependencies to the next major version. A follow-up MR supporting numpy2 will follow.