bump ruby_core_source dep

We need this to support the latest ruby patchlevels, which were introduced here:
http://www.ruby-lang.org/en/news/2013/06/27/hostname-check-bypassing-vulnerability-in-openssl-client-cve-2013-4073/