bump ruby version to pick up security fixes

https://www.ruby-lang.org/en/news/2013/11/22/heap-overflow-in-floating-point-parsing-cve-2013-4164/

(travis already done on master)