update ruby for CVE-2014-2525

Empty commit to update:
https://devcenter.heroku.com/changelog-items/439

cc @brandur