@mahkhaled yes, it's a good practice to move the gems to Gemfile and to Gemfile the following:
```rb
source "http://rubygems.org"`
gemspec
```

Besides, it's a good practice to remove Gemfile.lock from Git tracking so it shouldn't force the gem users from using the exact versions of the gem dependencies. For example, if in the Gemfile.lock `devise 1.3.2` is used, this will force the users to use `devise 1.3.2`.

Source:
http://yehudakatz.com/2010/12/16/clarifying-the-roles-of-the-gemspec-and-gemfile/