[dist] update Gemfile.locks for latest rails security updates