add more explicit version lock to active support