fixdep: using vulnerable activesupport
Version bump to 0.3.7