deps: tighten devDependency ranges