lock in gem version in gemspec