Upgrade to avoid Rails/JSON vulnerability