EXTREMELY CRITICAL security fix for Rails.
Update locked gemfile to match gemfile.