Update gems with security fixes
Merge with remote head?