Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4

[dependabot]

Bumps github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4.

Release notes

Sourced from github.com/go-jose/go-jose/v4's releases.

v4.1.4

What's Changed

Fixes Panic in JWE decryption. See GHSA-78h2-9frx-2jm8

Full Changelog: go-jose/go-jose@v4.1.3...v4.1.4

Commits

• 0e59876 Merge commit from fork
• ddffdbc Bump actions/checkout from 5 to 6 (#213)
• See full diff in compare view

[kusari-inspector]

Kusari Analysis Results:

✅ No Flagged Issues Detected
All values appear to be within acceptable risk parameters.

Both dependency and code security analyses independently recommend proceeding with this PR. The change updates github.com/go-jose/go-jose/v4 from v4.1.3 to v4.1.4, directly remediating a high-severity denial-of-service vulnerability (GHSA-78h2-9frx-2jm8 / CVE-2026-34986) that caused a panic during JWE decryption when the encrypted_key field is empty. The updated version v4.1.4 carries no known advisories, is the current latest release, and scores 10/10 on maintenance and code review metrics. Licenses remain permissive (Apache-2.0, BSD-3-Clause). Code analysis returned zero findings across all severity levels, with no secrets or workflow issues detected in the scanned files. This is a low-risk, high-benefit security patch with a clear remediation purpose and no offsetting concerns from either analysis.

Note

View full detailed analysis result for more information on the output and the checks that were run.

---

@kusari-inspector rerun - Trigger a re-analysis of this PR
@kusari-inspector feedback [your message] - Send feedback to our AI and team
See Kusari's documentation for setup and configuration.
Commit: 650da24, performed at: 2026-05-15T02:01:53Z

Found this helpful? Give it a 👍 or 👎 reaction!

[kusari-inspector]

Kusari PR Analysis rerun based on - 650da24 performed at: 2026-05-15T00:56:01Z - link to updated analysis

[kusari-inspector]

Kusari PR Analysis rerun based on - 650da24 performed at: 2026-05-15T02:02:07Z - link to updated analysis