dependency freeze in Gemfile.