add scenarion for locking transitive dependency versions in metadata.rb

This PR adds a failing scenario for #709

I guess it's failing, but I really couldn't run it under windows, so I'm waiting for travis-ci to check whether it fails or passes...