Psych > 4 uses safe_load by default, which in turn fails to load fixtures as those are using unsafe classes.
This will be tackled in Rails 6.1 and we should fix the rest, but as easy workaround lets pin it.