they don't directly support it, because thay way it works is more like a package.json and the lock file. but I'm not a big fan of our huge constraints file anyway. it's hard to maintain and contains oudated sometimes pinnings because of that.
packages should declare there dependencies right and let tools like PDM or Poetry do there job.
But in PDM you can even force versions when the dependy resolver can not solve it. Or normally you can pin versions or ranges of versions like in nodejs.