enforce gem dependency versions