Bump ruby-openid from 2.7.0 to 2.9.1

[dependabot[bot]]

Bumps ruby-openid from 2.7.0 to 2.9.1.

Release notes

Sourced from ruby-openid's releases.

v2.9.1

Update CHANGELOG with all the changes in v2.9.0 and update version.rb

v2.9.0

• Remove deprecated autorequire from gemspec. #123
• Rescue from Yadis::XRI::XRIHTTPError on discovery. #106
• Avoid SSRF for claimed_id request. #121
• Updated documentation. #115, #116, #117, #118
• Reduce warnings output in test runs. #119
• Drop deprecated option from gemspec. #120
• Remove circular require. #113
• Updated Travis CI config with Ruby 2.6 #114
• Simplify Bundler require; remove need for extra :require. #112

Changelog

Sourced from ruby-openid's changelog.

2.9.1

• Updated CHANGELOG.md

2.9.0

• Remove deprecated autorequire from gemspec. #123
• Rescue from Yadis::XRI::XRIHTTPError on discovery. #106
• Avoid SSRF for claimed_id request. #121
• Updated documentation. #115, #116, #117, #118
• Reduce warnings output in test runs. #119
• Drop deprecated option from gemspec. #120
• Remove circular require. #113
• Updated Travis CI config with Ruby 2.6 #114
• Simplify Bundler require; remove need for extra :require. #112

2.8.0

• Fix admin/mkassoc script. See openid/ruby-openid#103
• Allow specifying timeout for OpenID::StandardFetcher in environment variables. See openid/ruby-openid#109
• Fixed some documentation. See openid/ruby-openid#111
• Fixed example server. See openid/ruby-openid#91
• Fixed tests. See openid/ruby-openid#86
• Misc. changes to the CI setup. See
  • openid/ruby-openid#110
  • openid/ruby-openid#108
  • openid/ruby-openid#107

Commits

• 65963ca Update version to 2.9.1
• c05e0ef Update CHANGELOG.md
• 184518b Merge pull request #123 from ahorek/autorequire
• a0df64c remove autorequire
• aebc02e Merge pull request #106 from meineerde/fix/XRIHTTPError
• d181a8a Merge pull request #121 from faberge-eggs/SSRF-idref-fix
• 6182dc4 Merge pull request #117 from olleolleolle/patch-3
• 9c5111d Merge pull request #115 from olleolleolle/patch-1
• 3234bda Merge pull request #116 from olleolleolle/patch-2
• daa0878 Merge pull request #118 from olleolleolle/patch-4
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/instedd/verboice/network/alerts).