more Gemfile hacking
upgrading boxen and librarian-puppet gems