make version locks explicit
bundle update