bundle update, commit lock file