lock Dragonfly at higher version for security upgrade; upgrade gems