diff --git a/.github/workflows/pypi-publish.yml b/.github/workflows/pypi-publish.yml
index adc143d..d37d460 100644
--- a/.github/workflows/pypi-publish.yml
+++ b/.github/workflows/pypi-publish.yml
@@ -7,27 +7,5 @@ on:
 
 jobs:
   Publish:
-    runs-on: ubuntu-20.04
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v2
-
-      - name: Set up Python
-        uses: actions/setup-python@v2
-        with:
-          python-version: 3.8
-
-      - name: Install dependencies
-        run: |
-          python -m pip install --upgrade pip
-          pip install setuptools wheel babel
-
-      - name: Build package
-        run: |
-          python setup.py compile_catalog sdist bdist_wheel
-
-      - name: Publish on PyPI
-        uses: pypa/gh-action-pypi-publish@v1.3.1
-        with:
-          user: __token__
-          password: ${{ secrets.pypi_token }}
+    uses: inveniosoftware/workflows/.github/workflows/pypi-publish.yml@master
+    secrets: inherit
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 264fff9..666e08a 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -29,3 +29,4 @@ jobs:
     uses: inveniosoftware/workflows/.github/workflows/tests-python.yml@master
     with:
       extras: tests,admin
+      search-service: '[""]'
diff --git a/CHANGES.rst b/CHANGES.rst
index c98fcca..25ed002 100644
--- a/CHANGES.rst
+++ b/CHANGES.rst
@@ -1,6 +1,7 @@
 ..
     This file is part of Invenio.
     Copyright (C) 2015-2022 CERN.
+    Copyright (C) 2024 Graz University of Technology.
 
     Invenio is free software; you can redistribute it and/or modify it
     under the terms of the MIT License; see LICENSE file for more details.
@@ -8,6 +9,10 @@
 Changes
 =======
 
+Version 3.0.1 (released 2024-11-28)
+
+- setup: pin dependencies
+
 Version 3.0.0 (released 2024-11-13)
 
 - i18n:push translations
diff --git a/invenio_access/__init__.py b/invenio_access/__init__.py
index 5b684d6..cfd5da5 100644
--- a/invenio_access/__init__.py
+++ b/invenio_access/__init__.py
@@ -439,7 +439,7 @@
 )
 from .proxies import current_access
 
-__version__ = "3.0.0"
+__version__ = "3.0.1"
 
 __all__ = (
     "__version__",
diff --git a/setup.cfg b/setup.cfg
index ae1c2bd..8fb35ed 100644
--- a/setup.cfg
+++ b/setup.cfg
@@ -27,20 +27,20 @@ packages = find:
 python_requires = >=3.7
 zip_safe = False
 install_requires =
-    invenio-accounts>=3.0.0
-    invenio-base>=1.2.11
-    invenio-i18n>=2.0.0
+    invenio-accounts>=3.0.0,<6.0.0
+    invenio-base>=1.2.11,<2.0.0
+    invenio-i18n>=2.0.0,<3.0.0
 
 [options.extras_require]
 tests =
     cachelib>=0.1
-    invenio-db[mysql, postgresql]>=1.1.2
+    invenio-db[mysql, postgresql]>=1.1.2,<2.0.0
     pytest-black-ng>=0.4.0
-    pytest-invenio>=1.4.1
+    pytest-invenio>=1.4.1,<3.0.0
     redis>=2.10.5
     sphinx>=4.5
 admin =
-    invenio-admin>=1.2.0
+    invenio-admin>=1.2.0,<2.0.0
 # Kept for backwards compatibility
 postgresql =
 mysql =