Currently Bolt is pinning the yard gem to 0.9.19 due to an update in 0.9.20 that changes how symbols are parsed. A security alert was recently sent out concerning a vulnerability with 0.9.19, and being able to unpin from 0.9.19 would resolve this issue.