Best Practices

I believe treating the `Gemfile` as it was a `Gemfile.lock` is unnecessary. After all you can control which gems to update when you run bundle update.
Also, I think that by having good tests you should *not* be scared of upgrading your dependencies. It's should be encouraged imho.