specify dependency versions in gemspec