Ask heroku to upgrade libyaml for CVE-2014-2525