ruby-ro-bundle

Relax dependency versions

Update license name and unbounded dep to fix build warnings

Bump dependencies. Remove bundler dep and only support ruby 2.6+

Bump dependencies. Add `addressable` to replace URI.decode/encode calls

Updated ucf to fix rubyzip vulnerability.