v4.1.2

Release notes:

• Bump git2 in Cargo.lock to address a vulnerability alert. This is a transitive dependency of shadow-rs that should only be invoked at build-time to embed version metadata, but better to be safe than sorry.