chore: update deps due to CVE

[dbarrosop]

PR Type

Enhancement, Other

---

Description

• Update github.com/MicahParks/jwkset to v0.7.0

• Upgrade golang.org/x/time to v0.9.0

• Address potential security vulnerabilities (CVE)

• Update dependencies in go.mod and go.sum

---

Changes walkthrough 📝

Relevant files

Dependencies

go.mod Update jwkset and time package versions                                    go.mod Upgrade github.com/MicahParks/jwkset from v0.5.19 to v0.7.0 Update golang.org/x/time from v0.5.0 to v0.9.0 +2/-2      go.sum Update dependency checksums in go.sum                                        go.sum Add new versions of github.com/MicahParks/jwkset (v0.6.0, v0.7.0) Update golang.org/x/time to v0.9.0 Remove old versions and add new checksums +6/-0

---

💡 PR-Agent usage: Comment /help "your question" on any pull request to receive relevant information

[github-actions]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 1 🔵⚪⚪⚪⚪

🧪 No relevant tests

🔒 No security concerns identified

⚡ No major issues detected

[github-actions]

PR Code Suggestions ✨

Explore these optional code suggestions:

Category	Suggestion	Score
General	Verify compatibility with the updated dependency version and adjust code if needed Ensure that the update of github.com/MicahParks/jwkset from v0.5.19 to v0.7.0 is compatible with your codebase. Review the changelog for any breaking changes and update your code accordingly. go.mod [29] + github.com/MicahParks/jwkset v0.7.0 // indirect +# Ensure compatibility and update usage if necessary Suggestion importance[1-10]: 8 Why: Updating a dependency to a new major version (from v0.5.19 to v0.7.0) could introduce breaking changes. This suggestion is crucial for maintaining code stability and functionality.	8
Security	Update the cryptography library to the latest version to enhance security Consider updating golang.org/x/crypto to the latest version to address potential security vulnerabilities, as it's currently at v0.27.0 and newer versions are available. go.mod [24] - golang.org/x/crypto v0.27.0 + golang.org/x/crypto v0.19.0 // Use the latest stable version Suggestion importance[1-10]: 7 Why: Keeping cryptography libraries up-to-date is important for security. However, the suggestion's 'improved_code' section suggests an older version (v0.19.0) than the current one (v0.27.0), which is incorrect.	7