Bump rouge version to fix a security issue

Related to #3956

This version update fixes the issue described above. As per https://gitlab.com/gitlab-org/gitaly/-/issues/3956#note_814295714 - this can be fixed in the canonical repo.