locking ruby gems and version