Lock Gems dependencies with bundle