lock versions in Gemfile for release