I do not know the details well enough to be able to decide which is the
better way here. Both should be doable in principle.
As the maintainer of OpenImageIO I agree with Kevin, I'm OK with either, but one thing I would ask upstream is why they bumped soname on a patch level version increase...
With my packages I would typically update all released Fedora versions for patch level updates, but I also frequently build the package myself and run abi-compliance-checker or fedabipkgdiff on it to make sure things like soname bumps don't sneak in...
Thanks,
Richard