bug in dependent gem, locking down its version