lock gems to specified version