Pin versions in setup.py