update dependency by json gem vulnerability and other updates