Upgrade Faraday or lock the dependency

[mensfeld]

given a change like so:

diff --git a/lib/offending_engine/harvesters/ruby/ducalis/isolate/Gemfile.lock b/lib/offending_engine/harvesters/ruby/ducalis/isolate/Gemfile.lock
index fe805f7..bd39031 100644
--- a/lib/offending_engine/harvesters/ruby/ducalis/isolate/Gemfile.lock
+++ b/lib/offending_engine/harvesters/ruby/ducalis/isolate/Gemfile.lock
@@ -10,7 +10,7 @@ GEM
       regexp-examples (~> 1.3, >= 1.3.2)
       regexp_parser (>= 0.5.0)
       rubocop (>= 0.45.0)
-    faraday (0.17.1)
+    faraday (1.0.0)
       multipart-post (>= 1.2, < 3)
     git (1.5.0)
     jaro_winkler (1.5.4)

with a gemfile like so:

# frozen_string_literal: true

source 'https://rubygems.org'

gem 'ducalis'

when running ducalis:

gems/octokit-4.14.0/lib/octokit/middleware/follow_redirects.rb:14:in `<module:Middleware>'
gems/octokit-4.14.0/lib/octokit/middleware/follow_redirects.rb:11:in `<module:Octokit>'
gems/octokit-4.14.0/lib/octokit/middleware/follow_redirects.rb:9:in `<top (required)>'
gems/octokit-4.14.0/lib/octokit/default.rb:1:in `require'
gems/octokit-4.14.0/lib/octokit/default.rb:1:in `<top (required)>'
gems/octokit-4.14.0/lib/octokit.rb:4:in `require'
gems/octokit-4.14.0/lib/octokit.rb:4:in `<top (required)>'
gems/ducalis-0.12.0/lib/ducalis/utils.rb:3:in `require'
gems/ducalis-0.12.0/lib/ducalis/utils.rb:3:in `<top (required)>'
gems/ducalis-0.12.0/lib/ducalis.rb:26:in `require'
gems/ducalis-0.12.0/lib/ducalis.rb:26:in `<top (required)>'

I know, it's not directly related to this gem but rather to Faraday but I do believe Ducalis should be shipped with enough gemspec restrictions to run under valid conditions like presented above.