Bump json_pure

We use a different parser, but just in case, as json_pure gem version
1.7.5 has a remote code vulnerablity: upgrade to 1.7.7