Pin versions and add plone.api as dependency