setup: pin dependencies

setup.cfg

@@ -29,11 +29,11 @@ zip_safe = False
 install_requires =
     blinker>=1.4
     Flask-OAuthlib>=0.9.6
-    invenio-accounts>=5.0.0
-    invenio-base>=1.3.0
-    invenio-i18n>=2.0.0
-    invenio-mail>=1.0.2
-    invenio-theme>=3.0.0
+    invenio-accounts>=5.0.0,<6.0.0
+    invenio-base>=1.3.0,<2.0.0
+    invenio-i18n>=2.0.0,<3.0.0
+    invenio-mail>=1.0.2,<3.0.0
+    invenio-theme>=3.0.0,<4.0.0
     oauthlib>=1.1.2
     markupsafe>=2.1.5
     requests-oauthlib>=0.6.2
@@ -46,10 +46,10 @@ tests =
     flask_admin>=1.6.0
     pytest-black-ng>=0.4.0
     httpretty>=0.8.14
-    invenio-userprofiles>=3.0.0
+    invenio-userprofiles>=3.0.0,<4.0.0
     mock>=1.3.0
     oauthlib>=1.1.2,<3.0.0
-    pytest-invenio>=1.4.2
+    pytest-invenio>=1.4.2,<3.0.0
     requests-oauthlib>=0.6.2,<1.2.0
     simplejson>=3.8
     sphinx>=4.5