Merge pull request #3234 from openfoodfoundation/dependabot/bundler/oauth2-1.4.1

Bump oauth2 from 1.2.0 to 1.4.1

Gemfile

@@ -27,7 +27,7 @@ gem 'stripe', '~> 3.3.2'
 # which is needed for Pin Payments (and possibly others).
 gem 'activemerchant', '~> 1.78'
 
-gem 'oauth2', '~> 1.2.0' # Used for Stripe Connect
+gem 'oauth2', '~> 1.4.1' # Used for Stripe Connect
 gem 'jwt', '~> 1.5'
 
 gem 'delayed_job_active_record'

Gemfile.lock

@@ -284,7 +284,7 @@ GEM
     factory_bot_rails (4.8.2)
       factory_bot (~> 4.8.2)
       railties (>= 3.0.0)
-    faraday (0.9.2)
+    faraday (0.15.4)
       multipart-post (>= 1.2, < 3)
     ffaker (1.15.0)
     ffi (1.9.25)
@@ -536,9 +536,9 @@ GEM
     notiffany (0.1.1)
       nenv (~> 0.1)
       shellany (~> 0.0)
-    oauth2 (1.2.0)
-      faraday (>= 0.8, < 0.10)
-      jwt (~> 1.0)
+    oauth2 (1.4.1)
+      faraday (>= 0.8, < 0.16.0)
+      jwt (>= 1.0, < 3.0)
       multi_json (~> 1.3)
       multi_xml (~> 0.5)
       rack (>= 1.2, < 3)
@@ -810,7 +810,7 @@ DEPENDENCIES
   listen (= 3.0.8)
   momentjs-rails
   nokogiri (>= 1.6.7.1)
-  oauth2 (~> 1.2.0)
+  oauth2 (~> 1.4.1)
   ofn-qz!
   oj
   paper_trail (~> 3.0.8)