We should be locking gems down to an explicit version, according to our [guides](https://github.com/alphagov/styleguides/blob/ecc6de0ac864316a7366ca95227e53f3be640064/ruby.md).