locked to gemfile