upgrade ruby version to avoid vulnerability

... in libyaml <0.1.6 in Psych