feat(deps): bump github.com/lestrrat-go/jwx/v2 from 2.0.16 to 2.0.17

[dependabot[bot]]

Bumps github.com/lestrrat-go/jwx/v2 from 2.0.16 to 2.0.17.

Release notes

Sourced from github.com/lestrrat-go/jwx/v2's releases.

v2.0.17

v2.0.17 20 Nov 2023
[Bug Fixes]
  * [jws] Previously, `jws.UnregisterSigner` did not remove the previous signer instance when
    the signer was registered and unregistered multiple times ([#1016](https://github.com/lestrrat-go/jwx/issues/1016)). This has been fixed.
[New Features]

[jwe] (EXPERIMENTAL) jwe.WithCEK has been added to extract the content encryption key (CEK) from the Decrypt operation.
[jwe] (EXPERIMENTAL) jwe.EncryptStatic has been added to encrypt content using a static CEK.
Using static CEKs has serious security implications, and you should not use
this unless you completely understand the risks involved.

Changelog

Sourced from github.com/lestrrat-go/jwx/v2's changelog.

v2.0.17 20 Nov 2023 [Bug Fixes]

• [jws] Previously, jws.UnregisterSigner did not remove the previous signer instance when the signer was registered and unregistered multiple times (#1016). This has been fixed.

[New Features]

• [jwe] (EXPERIMENTAL) jwe.WithCEK has been added to extract the content encryption key (CEK) from the Decrypt operation.
• [jwe] (EXPERIMENTAL) jwe.EncryptStatic has been added to encrypt content using a static CEK. Using static CEKs has serious security implications, and you should not use this unless you completely understand the risks involved.

Commits

• c02af3e v2.0.17 (#1019)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[guardrails[bot]]

:warning: We detected 1 security issue in this pull request:

Vulnerable Libraries (1)

Severity | Details :-: | :-- High | [pkg:golang/github.com/lestrrat-go/jwx/v2@v2.0.17](https://github.com/xmidt-org/clortho/blob/575d4a839ba3b5888e494e44a9175f012c80e68d/go.mod#L7) upgrade to: *> v2.0.17* More info on how to fix Vulnerable Libraries in [Go](https://docs.guardrails.io/docs/en/vulnerabilities/go/using_vulnerable_libraries.html?utm_source=ghpr).

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

[codecov[bot]]

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Comparison is base (8132029) 94.62% compared to head (575d4a8) 94.62%. Report is 9 commits behind head on main.

Additional details and impacted files

```diff @@ Coverage Diff @@ ## main #86 +/- ## ======================================= Coverage 94.62% 94.62% ======================================= Files 16 16 Lines 1080 1080 ======================================= Hits 1022 1022 Misses 44 44 Partials 14 14 ``` | [Flag](https://app.codecov.io/gh/xmidt-org/clortho/pull/86/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=xmidt-org) | Coverage Δ | | |---|---|---| | [unittests](https://app.codecov.io/gh/xmidt-org/clortho/pull/86/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=xmidt-org) | `94.62% <ø> (ø)` | | Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=xmidt-org#carryforward-flags-in-the-pull-request-comment) to find out more.

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.