bump dev deps in Gemfile.lock