update rails version from vulnerbility