gitlabhq/gitlabhq — pull request #7430 by raphaelhetzel (2014-08-04 15:18:40+00:00)
Title: force usage of sql-injection-proof Rails version.

http://weblog.rubyonrails.org/2014/7/2/Rails_4_0_8_and_4_1_4_have_been_released/
Users should be forced to use the secure version of Rails in order to prevent sql-injections.