updated gem for minor security fix [ci skip]