deps: tighten devDepencency ranges