Adding some pessimistic version locks to gemspec

also per feedback from @joshk, although he didn't mention exactly what
kind of version locks and on which dependencies...