Gem bumps

[mrmattnewell]

Is there a reason that the dependencies in this GEM have not been bumped, despite the outstanding dependabot PR's?

I ask because outdated dependencies such as rack /nokogiri are creating critical vulnerabilities that are getting picked up in our security scans, for example:

If needs be, we'll fork and update, but it seems wiser just to bump the gem for everyone?