fix the pygments pin to avoid dev releases