[Security] Bump sprockets from 3.7.1 to 3.7.2

Bumps [sprockets](https://github.com/rails/sprockets) from 3.7.1 to 3.7.2. **This update includes a security fix.**
- [Release notes](https://github.com/rails/sprockets/releases)
- [Changelog](https://github.com/rails/sprockets/blob/v3.7.2/CHANGELOG.md)
- [Commits](rails/sprockets@v3.7.1...v3.7.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Gemfile.lock

@@ -61,7 +61,7 @@ GEM
       coffee-script-source
       execjs
     coffee-script-source (1.12.2)
-    concurrent-ruby (1.0.5)
+    concurrent-ruby (1.1.6)
     diff-lcs (1.3)
     erubi (1.6.1)
     erubis (2.7.0)
@@ -98,7 +98,7 @@ GEM
       mini_portile2 (~> 2.2.0)
     pg (0.21.0)
     puma (3.10.0)
-    rack (2.0.3)
+    rack (2.2.3)
     rack-test (0.6.3)
       rack (>= 1.0)
     rails (5.1.3)
@@ -188,7 +188,7 @@ GEM
     spring-watcher-listen (2.0.1)
       listen (>= 2.7, < 4.0)
       spring (>= 1.2, < 3.0)
-    sprockets (3.7.1)
+    sprockets (3.7.2)
       concurrent-ruby (~> 1.0)
       rack (> 1, < 3)
     sprockets-rails (3.2.0)