build(deps): update league/oauth2-google requirement from ^4.0 to ^5.0

[dependabot]

Updates the requirements on league/oauth2-google to permit the latest version.

Changelog

Sourced from league/oauth2-google's changelog.

5.0.0 - 2026-03-23

Fixed

• Ensure compatibility with oauth2-client version 3 by @​garak

Removed

• Remove PHP 7 support by @​garak

4.2.0 - 2026-03-09

Added

• Allow oauth2-client version 2 or 3, #140 by @​garak

4.1.0 - 2025-12-15

Added

• Added getEmailVerified(), isEmailTrustworthy() to user definition, #132 by @​dt-thomas-durand

4.0.1 - 2022-03-17

Changed

• Corrected file excludes for dist archive, #120 by @​cedric-anne

4.0.0 - 2022-03-04

Changed

• Adding return type, #98 by @​yozhef
• Add PHP 8.0 support, require PHP 7.3 or newer, #102 by @​yozhef

3.0.4 - 2021-01-27

Fixed

• Correct OAuth endpoint, #94 by @​Slamdunk

3.0.3 - 2020-07-24

Fixed

• Remove the approval_prompt from default parameters, #90

3.0.2 - 2019-11-16

Fixed

... (truncated)

Commits

• 23ba9a8 Prepare for release
• d3e3f4b Merge pull request #142 from garak/fix-getid
• b571b73 coverage on php 8.5
• a9f102f Fix oauth2-client 3 compat, drop PHP 7 support
• 72be695 Prepare for release
• d217cd2 Merge pull request #140 from garak/client-3
• 449c60b Allows oauth2-client version 3
• 8b9bb43 Prepare for release
• 158be45 Merge pull request #132 from dt-thomas-durand/feat/email-verified-or-trustworthy
• bd0a3d1 feat: added getEmailVerified() and isEmailTrustworthy() based on Google docum...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Verification Details

Dependency Compatibility Verified

• league/oauth2-google ^5.0 requires league/oauth2-client: ^2.0 || ^3.0
• Project has league/oauth2-client: ^2.6 ✓
• PHP requirement: ^8.0 (project has ^8.1) ✓

API Compatibility Verified

The Modules\Emails\OAuth2\Google class extends League\OAuth2\Client\Provider\Google and:

• Overrides getDefaultScopes() - return type array unchanged ✓
• Uses constructor pattern compatible with v5.0.0 ✓
• Uses Gmail-specific scope https://mail.google.com/ (not affected by OpenID Connect changes)

Files Reviewed (1 file)

• composer.json - Dependency version constraint update

---

_{Reviewed by glm-5-20260211 · 252,920 tokens}