more strict control of gems' versions