Bump oauth2 from 4.0.0-alpha.3 to 4.1.0

[dependabot-preview]

Bumps oauth2 from 4.0.0-alpha.3 to 4.1.0.

Release notes

Sourced from oauth2's releases.

4.1.0

New features

• Add add_scopes convenience methods to request objects (#138)
• Add set_redirect_uri method to CodeTokenRequest (#144)

Bug fixes

• Await the given sleep method in DeviceAccessTokenRequest::request_async (#152)
• Fix curl client implementation (#147)
• Update docs to reference current version

Other changes

• Don't depend on chrono oldtime (#149)
• Update dependencies (base64, rand, hmac) (#145)
• Update Microsoft example to use unified Azure app registration (#143)

4.0.0

Changes since 4.0.0-beta.1

• Fix a couple of doc comments and an error message to say failed instead of Errored.

Summary of changes since 3.0.0

Breaking changes

• Raise minimum supported Rust version (MSRV) to 1.45.
• Upgrade reqwest to 0.11 and rename feature flag to reqwest. This upgrades tokio to 1.0 and removes support for both the reqwest-010 and reqwest-09 feature flags.
• Drop support for futures 0.1 and remove the futures-01 and futures-03 feature flags; only async/await and futures 0.3 are now supported (without requiring any feature flags).
• Eliminate Async* traits and move the request_async methods to the underlying *Request structs
• Migrate public API from http 0.1 to 0.2.
• Return error types that implement std::error::Error instead of failure::Fail.
• Expose a serde_path_to_error::Error<serde_json::Error>> in the RequestTokenError::Parse variant instead of a serde_json::Error to make JSON deserialization errors easier to diagnose.
• Add #[non_exhaustive] attribute to AuthType to support non-breaking additions in the future.

New features

• Add support for OAuth 2.0 Device Authorization Grant.
• Add support for OAuth 2.0 Token Revocation (RFC 7009) (#122).
• Add support for OAuth 2.0 Token Introspection.
• Add support for the plain (plaintext) PKCE verifier when the (non-default) pkce-plain feature flag is enabled. Use of this feature is discouraged for security reasons.
• Support wasm32 targets (#120).
• Add ureq HTTP client (#119).

Other changes

• Have reqwest client use rustls-tls by default instead of native TLS. This behavior can be overridden using the native-tls feature flag.
• RUSTSEC-2016-0005: replace rust-crypto with hmac in dev-dependencies

4.0.0-beta.1

This is the first beta release for the 4.0 major version. No further breaking changes are expected until the next major version.

Breaking Changes

• Add rustls-tls (default) and native-tls feature flags for use with reqwest. Previously, enabling the reqwest feature flag would always use rustls. The default behavior is unchanged, but users that disable the default features and wish to continue using rustls may wish to add the rustls-tls feature flag to their Cargo.toml.
• Expose a serde_path_to_error::Error<serde_json::Error>> in the RequestTokenError::Parse variant instead of a serde_json::Error. This change should make JSON deserialization errors easier to diagnose.

... (truncated)

Commits

• dfa6139 Update docs to reference version 4.1
• 99fc353 Actually .await the given sleep method in DeviceAccessTokenRequest::request_a...
• 67c47de Linkify badge
• 87536b7 Fix GitHub actions job strategy
• 785dbcc Replace Travis build with GitHub Actions
• aa651c8 Don't depend on chrono oldtime (#149)
• d5b8438 fix curl client implementation (#147)
• 69b3b6c Bump version to 4.1.0 due to new features
• 4aae979 Add add_scopes convenience method for many scopes and/or runtime defined (#138)
• 65b3aab Update dependencies (base64, rand, hmac) (#145)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)