deps: use 0.8-compatible semver in devDependencies