Pessimistic versioning for pygments, and bump to latest

This bumps us to the latest pygments with updated lexers, and it also switches to the pessimistic version constraint for greater stability.

cc @josh