2.2.x
build, provenance, publish workflow
update dependencies
use pip-compile-multi for requirements
update dev dependencies
update requirements
enforce minimum versions in env
add type stub packages