Go mod dependency issue

[bytewayio]

Which version of the SDK was used?

0.14.0

Which platform are you using? (ex: Windows, Linux, Debian)

Mac & Linux

What problem was encountered?

github.com/dgrijalva/jwt-go: v3.2.0+incompatible
Number of packages: 1
Known security vulnerability: 1
Security advisory: 0
Exploits: unavailable
Highest severity: high
Recommendation: v4.0.0-preview1

How can we reproduce the problem in the simplest way?

vscode + go extension + go mod extension

Have you found a mitigation/solution?

github.com/dgrijalva/jwt-go has been inactive for quite a long time, maybe switch to gopkg.in/square/go-jose.v2?

[serprex]

jwt-go is now maintained from https://github.com/golang-jwt/jwt which is what go-autorest is using but references to old repo remain in go.sum files