Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt

[Haimantika]

The maintained fork of https://github.com/form3tech-oss/jwt-go seems now to be https://github.com/golang-jwt/jwt, we might need to make some changes accordingly to:

etcd/server/go.mod

Line 9 in 4cbb949

github.com/form3tech-oss/jwt-go v3.2.3+incompatible

For more information on this please refer to kubernetes/kubernetes#104007

[ysksuzuki]

etcd 3.4 still depends on github.com/dgrijalva/jwt-go v3.2.0 which has the CVE GHSA-w73w-5m7g-f7qc.
https://github.com/etcd-io/etcd/blob/release-3.4/go.mod#L12

Is it OK to send a PR to update github.com/dgrijalva/jwt-go to github.com/golang-jwt/jwt on release-3,4 branch?

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed after 21 days if no further activity occurs. Thank you for your contributions.