The license file doesn't specify that later versions can be used, but I missed that it is stated in the README: "pymavlink is released under the GNU Lesser General Public License v3 or later."