updates to gems based on security vulns