pin rubyzip to at least 1.0