add a timeout to the test, loosen dev deps