allow semver compatible devDependencies updates