Bump gems to fix CVE-2014-4920