High CVE (CVE-2025-30204): golang-jwt/jwt in v3.2.2+incompatible

[Llois41]

Describe the bug

The current version contains the golang-jwt/jwt dependency in v3.2.2+incompatible which is affected by CVE-2025-30204

Expected behavior
Please upgrade this dependency

---

Message from the maintainers:

If you wish to see this enhancement implemented please add a 👍 reaction to this issue! We often sort issues this way to know what to prioritize.

[alan113696]

This was brought up previously: #3806
Attempted updates are not merged: #3864

[Llois41]

@whynowy any reason the mentionend PR was closed?