Lock package versions for devDependencies to facilitate CI