lock gem to versions