Your team consumes a module from the public Terraform Registry that follows semantic versioning. The current pinned version is 3.2.0. You want Terraform to automatically pick up bug-fix and minor feature releases within the 3.x line during future `terraform init -upgrade` runs, but you must avoid ever pulling in a 4.0.0 release that could introduce breaking changes. Which version constraint should you set in the module block?