This appears to relate to the "cross-platform lock file" feature of PDM. Since there aren't Windows wheels for 0.2.8 due to Appveyor not supporting that environment (#26), this feature would force it to use 0.2.7 by default.
Wheel for CPython 3.12 is missing for Windows