I don't think these two should be ignored - Gemfile.lock is useful for verifying exact versions required and ignoring spec/fixtures may confuse someone working on this in future.

We don't ignore these in the [puppet-skeleton module](https://github.com/gds-operations/puppet-skeleton/blob/master/.gitignore).