Bump spdx from 2.0.12 to 4.1.4

Bumps [spdx](https://github.com/librariesio/spdx) from 2.0.12 to 4.1.4.
- [Release notes](https://github.com/librariesio/spdx/releases)
- [Commits](https://github.com/librariesio/spdx/commits)

---
updated-dependencies:
- dependency-name: spdx
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

Gemfile

@@ -24,7 +24,7 @@ gem "rack-attack-rate-limit", require: "rack/attack/rate-limit"
 gem 'rack-cors'
 gem 'rswag-api'
 gem 'rswag-ui'
-gem 'spdx', '2.0.12'
+gem 'spdx', '4.1.4'
 gem "semantic"
 gem "semantic_range"
 gem "chartkick"

Gemfile.lock

@@ -129,7 +129,6 @@ GEM
       faraday (~> 2.0)
       typhoeus (~> 1.4)
     ffi (1.16.3)
-    fuzzy_match (2.1.0)
     globalid (1.2.1)
       activesupport (>= 6.1)
     google-protobuf (4.26.0)
@@ -296,8 +295,7 @@ GEM
       activesupport (>= 5.2.0)
     sitemap_generator (6.3.0)
       builder (~> 3.0)
-    spdx (2.0.12)
-      fuzzy_match (~> 2.1)
+    spdx (4.1.4)
       treetop (~> 1.6)
     sprockets (4.2.1)
       concurrent-ruby (~> 1.0)
@@ -378,7 +376,7 @@ DEPENDENCIES
   shoulda-context
   shoulda-matchers
   sitemap_generator
-  spdx (= 2.0.12)
+  spdx (= 4.1.4)
   sprockets-rails
   tzinfo-data
   web-console