removing outdated gem with vulnerable dependency