Use pesimitic locking for dev dependencies