lock down dependency versions, update gemspec, bump version