Closed bcandeias closed 5 months ago
@ericchiang sorry but I could only get to this now. You're right, I let these changes slide in with my local setup. In the meantime I saw you did bump to 4. Thanks, and apologies for not being more of a help 😅 Closing this PR.
This bumps the go-jose dependency to a version that addresses vulnerability CVE-2024-28180.
Tested with the below:
Closes #417