Use explict, secure url

Using :rubygems is deprecated