updates: create only messages for two errors

If we create message records for every parse or validation error,
we easily dos ourself - every good developers might do so.
upgrade gems

* e.g. important rails security update