peg runtime dependency versions
fixes issues with older rpsec: undefined method `failure_message' for #<RSpec::Matchers::DSL::Matcher:0x007f90e8849290>
actionpack as a runtime dependency