allow current bundler versions and add the lock.