Lock dev dependencies