- The former repo has been migrated (see https://github.com/dgrijalva/jwt-go/issues/462). - Dependabot alerted on a security issue in the old version (https://github.com/advisories/GHSA-w73w-5m7g-f7qc). This issue should not effect Fleet due to no use of `aud` claims.