From d9c4e417ee252f9dd877b56ced046c343a35191f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 9 Nov 2026 21:58:23 +0000
Subject: [PATCH] Bump the bundler group across 1 directory with 2 updates

Bumps the bundler group with 2 updates in the /backend directory: [omniauth](https://github.com/omniauth/omniauth) and [oauth2](https://github.com/ruby-oauth/oauth2).


Updates `omniauth` from 1.8.1 to 2.2.0
- [Release notes](https://github.com/omniauth/omniauth/releases)
- [Changelog](https://github.com/omniauth/omniauth/blob/master/CHANGELOG.md)
- [Commits](https://github.com/omniauth/omniauth/compare/v1.8.1...v2.2.0)

Updates `oauth2` from 1.4.7 to 2.1.0
- [Release notes](https://github.com/ruby-oauth/oauth2/releases)
- [Changelog](https://github.com/ruby-oauth/oauth2/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ruby-oauth/oauth2/compare/v1.4.7...v2.1.0)

---
updated-dependencies:
- dependency-name: omniauth
  dependency-version: 2.2.0
  dependency-type: direct:production
  dependency-group: bundler
- dependency-name: oauth2
  dependency-version: 2.1.0
  dependency-type: indirect
  dependency-group: bundler
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 backend/Gemfile      |  2 +-
 backend/Gemfile.lock | 58 +++++++++++++++++++++++++++++---------------
 2 files changed, 39 insertions(+), 21 deletions(-)

diff --git a/backend/Gemfile b/backend/Gemfile
index 2951a450..eeab0309 100644
--- a/backend/Gemfile
+++ b/backend/Gemfile
@@ -30,7 +30,7 @@ gem "cancancan", "~> 3.6.1"
 gem "cancancan-mongoid", "~> 2.0"
 gem "devise", "~> 5.0"
 gem "devise_invitable", "~> 2.0"
-gem "omniauth", "~> 1.8"
+gem "omniauth", "~> 2.2"
 gem "omniauth-facebook", "~> 3.0"
 
 # Colored output to console
diff --git a/backend/Gemfile.lock b/backend/Gemfile.lock
index 84c7b47d..36d5e595 100644
--- a/backend/Gemfile.lock
+++ b/backend/Gemfile.lock
@@ -83,7 +83,11 @@ GEM
     annotate (3.2.0)
       activerecord (>= 3.2, < 8.0)
       rake (>= 10.4, < 14.0)
+    anonymous_loader (0.1.5)
+      version_gem (~> 1.1, >= 1.1.17)
     ast (2.4.2)
+    auth-sanitizer (0.2.5)
+      version_gem (~> 1.1, >= 1.1.16)
     awesome_print (1.9.2)
     base64 (0.3.0)
     bcrypt (3.1.22)
@@ -222,7 +226,8 @@ GEM
       activesupport (>= 7.0, < 8.2)
       request_store (~> 1.0)
     hashdiff (1.2.1)
-    hashie (3.5.7)
+    hashie (5.2.0)
+      logger
     httpclient (2.8.3)
     i18n (1.15.2)
       concurrent-ruby (~> 1.0)
@@ -300,20 +305,26 @@ GEM
     nokogiri (1.19.4)
       mini_portile2 (~> 2.8.2)
       racc (~> 1.4)
-    oauth2 (1.4.7)
-      faraday (>= 0.8, < 2.0)
-      jwt (>= 1.0, < 3.0)
-      multi_json (~> 1.3)
+    oauth2 (2.1.0)
+      anonymous_loader (~> 0.1, >= 0.1.5)
+      auth-sanitizer (~> 0.2, >= 0.2.5)
+      faraday (>= 0.17.3, < 4.0)
+      jwt (>= 1.0, < 4.0)
+      logger (~> 1.2)
       multi_xml (~> 0.5)
-      rack (>= 1.2, < 3)
-    omniauth (1.8.1)
-      hashie (>= 3.4.6, < 3.6.0)
-      rack (>= 1.6.2, < 3)
+      rack (>= 1.2, < 4)
+      snaky_hash (~> 2.0, >= 2.0.9)
+      version_gem (~> 1.1, >= 1.1.17)
+    omniauth (2.2.0)
+      hashie (>= 3.5.2)
+      logger
+      rack (>= 2.2.8)
+      rack-protection (>= 2.2.0)
     omniauth-facebook (3.0.0)
       omniauth-oauth2 (~> 1.2)
-    omniauth-oauth2 (1.5.0)
-      oauth2 (~> 1.1)
-      omniauth (~> 1.2)
+    omniauth-oauth2 (1.9.0)
+      oauth2 (>= 2.0.2, < 3)
+      omniauth (~> 2.0)
     orm_adapter (0.5.0)
     ostruct (0.6.3)
     parallel (1.24.0)
@@ -345,17 +356,21 @@ GEM
       pusher-signature (~> 0.1.8)
     pusher-signature (0.1.8)
     racc (1.8.1)
-    rack (2.2.24)
+    rack (3.2.8)
     rack-cors (2.0.2)
       rack (>= 2.0.0)
-    rack-session (1.0.2)
-      rack (< 3)
+    rack-protection (4.2.1)
+      base64 (>= 0.1.0)
+      logger (>= 1.6.0)
+      rack (>= 3.0.0, < 4)
+    rack-session (2.1.2)
+      base64 (>= 0.1.0)
+      rack (>= 3.0.0)
     rack-test (2.2.0)
       rack (>= 1.3)
     rack-timeout (0.7.0)
-    rackup (1.0.1)
-      rack (< 3)
-      webrick
+    rackup (2.3.1)
+      rack (>= 3)
     rails (7.2.3.2)
       actioncable (= 7.2.3.2)
       actionmailbox (= 7.2.3.2)
@@ -460,6 +475,9 @@ GEM
     simplecov (1.2.0)
     sixarm_ruby_unaccent (1.2.0)
     smart_properties (1.17.0)
+    snaky_hash (2.0.9)
+      hashie (>= 0.1.0, < 6)
+      version_gem (~> 1.1, >= 1.1.16)
     sprockets (4.2.2)
       concurrent-ruby (~> 1.0)
       logger
@@ -496,13 +514,13 @@ GEM
     useragent (0.16.11)
     vcr (6.3.1)
       base64
+    version_gem (1.1.17)
     warden (1.2.9)
       rack (>= 2.0.9)
     webmock (3.26.1)
       addressable (>= 2.8.0)
       crack (>= 0.3.2)
       hashdiff (>= 0.4.0, < 2.0.0)
-    webrick (1.9.2)
     websocket-driver (0.8.2)
       base64
       websocket-extensions (>= 0.1.0)
@@ -547,7 +565,7 @@ DEPENDENCIES
   mongoid (= 9.0.11)
   mongoid-rspec
   nearest_time_zone
-  omniauth (~> 1.8)
+  omniauth (~> 2.2)
   omniauth-facebook (~> 3.0)
   pg
   pry-byebug