bundle update (rails CVEs)