deps: somewhat pin dev dependencies