thor: require 1.4 or newer

Thor 1.4.0 resolves a security issue: rails/thor#897

Related: voxpupuli/modulesync#309

Author: kenyon

ext/project_data.yaml

@@ -15,4 +15,4 @@ gem_default_executables: 'facter'
 gem_required_ruby_version: ['>= 2.5', '< 4.0']
 gem_runtime_dependencies:
   hocon: ~> 1.3
-  thor: ['>= 1.0.1', '< 1.3']
+  thor: ~> 1.4

openfact.gemspec

@@ -49,5 +49,5 @@ Gem::Specification.new do |spec|
   spec.add_runtime_dependency 'base64', '>= 0.1', '< 0.4'
   spec.add_runtime_dependency 'hocon', '~> 1.3'
   spec.add_runtime_dependency 'logger', '~> 1.7'
-  spec.add_runtime_dependency 'thor', ['>= 1.0.1', '< 2']
+  spec.add_runtime_dependency 'thor', '~> 1.4'
 end