bump vendored gems