locking in runtime dependencies

versions are pulled from current master Gemfile.lock from our processing infrastructure