Upgrade com.nimbusds:nimbus-jose-jwt dependency

[elefeint]

Summary

Upgrade com.nimbusds:nimbus-jose-jwt to version 7.9 or higher (it is currently 7.8.1, which seems to be the final bugfix version for 7.8 branch)

There is a medium severity validation security vulnerability (snyk, blog) on lower versions.

[fhanik]

I've requested input from @jzheaux. I remember there may be some incompatibilities that need to be resolved prior to fixing this.

[MichaelVetter]

The security vulnerability is fixed in version 7.8.1 (see #7570) but it is helpful that you upgraded the version.

[jzheaux]

Correct, @MichaelVetter, because Spring Security was on 7.8.1, there's no security issue. It's always the goal to upgrade to the latest possible, though, so this was a good ticket either way.

[elefeint]

Ah, so it was a false positive because CVE did not get updated. Good to know, thanks!