lock rspec version, bump rubocop