Update dev requirements, lock in versions