While Foreman doesn't depend on Faraday directly, it is pulled in via fog-google which depends on google-cloud-env, googleauth and signet which all pull in Faraday. This is not a bad thing, but our ecosystem is largely incompatible with Faraday 2.x. To make packaging easier, pinning to 1.x works around this.