Slim 3, update CSRF

Good day to all.
Just a couple of days ago, the slim/csrf package was updated.
I actively use Slim 3 in development, and at the moment I do not want to leave this version.

Tell me, do I understand correctly, so that I need to install this package through the composer I need a command composer require slim/csrf "0.8.3" ?

Will the Slim 3 version be ignored in the future?

0.8.3 was the last version for the Slim 3 support.

1.0.0 and up is for Slim 4 only.