pin versions in the Gemfile