Locking down gems to releases