update devDependencies / use --timeout flag