move dependency to Gemfile
fixing pessimistic dependency warnings