Pin dependencies for tox env