validate lockfile & the bundler version