explicily set ruby patch version

implicitly bump ruby patch version for security fixes