diff --git a/Gemfile b/Gemfile
index 71d5aca..4291c8b 100644
--- a/Gemfile
+++ b/Gemfile
@@ -12,7 +12,7 @@ gem 'addressable'
 gem 'commonmarker'
 gem 'aws-sdk-core' # STS
 gem 'aws-sdk-s3'
-gem 'omniauth', '< 2'
+gem 'omniauth', '< 3'
 gem 'omniauth-github'
 gem 'octokit'
 gem 'jwt'
diff --git a/Gemfile.lock b/Gemfile.lock
index 70aef2b..9a29184 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -190,15 +190,16 @@ GEM
     octokit (6.0.1)
       faraday (>= 1, < 3)
       sawyer (~> 0.9)
-    omniauth (1.9.2)
+    omniauth (2.0.0)
       hashie (>= 3.4.6)
       rack (>= 1.6.2, < 3)
-    omniauth-github (1.4.0)
-      omniauth (~> 1.5)
-      omniauth-oauth2 (>= 1.4.0, < 2.0)
-    omniauth-oauth2 (1.7.3)
+      rack-protection
+    omniauth-github (2.0.1)
+      omniauth (~> 2.0)
+      omniauth-oauth2 (~> 1.8)
+    omniauth-oauth2 (1.8.0)
       oauth2 (>= 1.4, < 3)
-      omniauth (>= 1.9, < 3)
+      omniauth (~> 2.0)
     pg (1.4.5)
     premailer (1.19.0)
       addressable
@@ -215,6 +216,8 @@ GEM
     rack (2.2.6.2)
     rack-contrib (2.3.0)
       rack (~> 2.0)
+    rack-protection (3.0.5)
+      rack
     rack-test (2.0.2)
       rack (>= 1.3)
     rails (6.1.7.2)
@@ -339,7 +342,7 @@ DEPENDENCIES
   listen
   nokogiri
   octokit
-  omniauth (< 2)
+  omniauth (< 3)
   omniauth-github
   pg (>= 0.18, < 2.0)
   premailer-rails