'bundle update' most harmless-seeming gems

Use logger-syslog from rubygems source rather than github

Lock scarier gems to specific versions