Pin omniauth-cas to 3.0.x

Gemfile

@@ -25,9 +25,8 @@ gem "vite_ruby"
 gem "sul_orcid_client"
 
 # Single sign on
-# Note that as of March 2024, upgrading to omniauth-cas 3.x will break authentication
 gem "devise"
-gem "omniauth-cas", "~> 2.0.0"
+gem "omniauth-cas", "~> 3.0"
 
 group :development, :test do
   gem "bixby"

Gemfile.lock

@@ -289,13 +289,14 @@ GEM
       rack (>= 1.2, < 4)
       snaky_hash (~> 2.0)
       version_gem (~> 1.1)
-    omniauth (1.9.2)
+    omniauth (2.1.2)
       hashie (>= 3.4.6)
-      rack (>= 1.6.2, < 3)
-    omniauth-cas (2.0.0)
-      addressable (~> 2.3)
-      nokogiri (~> 1.5)
-      omniauth (~> 1.2)
+      rack (>= 2.2.3)
+      rack-protection
+    omniauth-cas (3.0.0)
+      addressable (~> 2.8)
+      nokogiri (~> 1.12)
+      omniauth (~> 2.1)
     omniauth-oauth2 (1.7.3)
       oauth2 (>= 1.4, < 3)
       omniauth (>= 1.9, < 3)
@@ -321,6 +322,9 @@ GEM
       nio4r (~> 2.0)
     racc (1.8.0)
     rack (2.2.8.1)
+    rack-protection (3.2.0)
+      base64 (>= 0.1.0)
+      rack (~> 2.2, >= 2.2.4)
     rack-proxy (0.7.7)
       rack
     rack-session (1.0.2)
@@ -516,7 +520,7 @@ DEPENDENCIES
   isni
   jbuilder
   oauth2 (~> 2.0.x)
-  omniauth-cas (~> 2.0.0)
+  omniauth-cas (~> 3.0)
   omniauth-orcid
   pg
   puma (= 5.6.8)