lock versions for plone.app.async