bump AR dependency to ~> 4.0