bump some vulnerable gems