bump nokogiri in gemspec, actually update deps