diff --git a/Gemfile b/Gemfile
index de72fc95..6cbee38f 100644
--- a/Gemfile
+++ b/Gemfile
@@ -13,7 +13,7 @@ gem 'chartkick'
 gem 'webpacker', '~> 4.0'
 
 gem 'devise',             '~> 4.7.1'
-gem 'omniauth',           '~> 1.8.1'
+gem 'omniauth',           '~> 2.0.0'
 gem 'omniauth-github'
 gem 'omniauth-twitter'
 
diff --git a/Gemfile.lock b/Gemfile.lock
index 62e110a6..fe5522c5 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -175,7 +175,7 @@ GEM
       haml (>= 4.0.6, < 6.0)
       html2haml (>= 1.0.1)
       railties (>= 4.0.1)
-    hashie (3.5.7)
+    hashie (5.0.0)
     html2haml (2.2.0)
       erubis (~> 2.7.0)
       haml (>= 4.0, < 6)
@@ -226,18 +226,19 @@ GEM
       multi_json (~> 1.3)
       multi_xml (~> 0.5)
       rack (>= 1.2, < 3)
-    omniauth (1.8.1)
-      hashie (>= 3.4.6, < 3.6.0)
+    omniauth (2.0.0)
+      hashie (>= 3.4.6)
       rack (>= 1.6.2, < 3)
-    omniauth-github (1.3.0)
-      omniauth (~> 1.5)
-      omniauth-oauth2 (>= 1.4.0, < 2.0)
-    omniauth-oauth (1.1.0)
+      rack-protection
+    omniauth-github (2.0.1)
+      omniauth (~> 2.0)
+      omniauth-oauth2 (~> 1.8)
+    omniauth-oauth (1.2.0)
       oauth
-      omniauth (~> 1.0)
-    omniauth-oauth2 (1.5.0)
-      oauth2 (~> 1.1)
-      omniauth (~> 1.2)
+      omniauth (>= 1.0, < 3)
+    omniauth-oauth2 (1.8.0)
+      oauth2 (>= 1.4, < 3)
+      omniauth (~> 2.0)
     omniauth-twitter (1.4.0)
       omniauth-oauth (~> 1.1)
       rack
@@ -262,9 +263,11 @@ GEM
     puma (3.12.2)
     pundit (1.1.0)
       activesupport (>= 3.0.0)
-    rack (2.2.2)
+    rack (2.2.6.2)
     rack-mini-profiler (1.0.0)
       rack (>= 1.2.0)
+    rack-protection (2.2.4)
+      rack
     rack-proxy (0.6.5)
       rack
     rack-test (1.1.0)
@@ -431,7 +434,7 @@ DEPENDENCIES
   launchy
   listen (>= 3.0.5, < 3.2)
   nokogiri (~> 1.10.8)
-  omniauth (~> 1.8.1)
+  omniauth (~> 2.0.0)
   omniauth-github
   omniauth-twitter
   pg