upgrade ruby version for libyaml security hole