build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.2

[dependabot[bot]]

Bumps github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.2.

Release notes

Sourced from github.com/go-jose/go-jose/v3's releases.

Version 3.0.2

Fixed

• DecryptMulti: handle decompression error (#19)

Changed

• jwe/CompactSerialize: improve performance (#67)
• Increase the default number of PBKDF2 iterations to 600k (#48)
• Return the proper algorithm for ECDSA keys (#45)
• Update golang.org/x/crypto to v0.19 (#94)

Added

• Add Thumbprint support for opaque signers (#38)

Changelog

Sourced from github.com/go-jose/go-jose/v3's changelog.

v3.0.2

Fixed

• DecryptMulti: handle decompression error (#19)

Changed

• jwe/CompactSerialize: improve performance (#67)
• Increase the default number of PBKDF2 iterations to 600k (#48)
• Return the proper algorithm for ECDSA keys (#45)

Added

• Add Thumbprint support for opaque signers (#38)

Commits

• 863f73b v3.0.2: Update changelog (#95)
• bdbc794 Update golang.org/x/crypto to v0.19 (backport) (#94)
• 25bce79 Updated go-jose v3.0.0 to v3.0.1 in jose-util (#70)
• aa386df jwe/CompactSerialize: improve performance. (#67)
• 053c9bf DecryptMulti: handle decompression error (#19)
• ca9011b Bump go version to 1.21.4 to satisfy govulncheck (#68)
• c8399df Revert pull request #10 (multiple audiences) (#24)
• ec819e9 Add a security.md doc for contacting us about potential security vulnerabilit...
• 65351c2 Fix decryption DoS: Reject too high p2c (#66)
• 260aa26 Bump golang to 1.21 GA (#54)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[app-sre-bot]

Can one of the admins verify this patch?

[crozzy]

@dependabot rebase