bump oauth2 client for pub release