Update dependencies (moment, optimist, and devs)

Use fix versions everywhere for safe validation
Add why fixed versions are favored over range