Merge pull request #14630 from wolfi-dev/cve-istio-operator-1.20-e59c…

…ac8abdb6664b38072a6a4834f399

istio-operator-1.20/1.20.3-r3: cve remediation

istio-operator-1.20.yaml

@@ -1,7 +1,7 @@
 package:
   name: istio-operator-1.20
   version: 1.20.3
-  epoch: 3
+  epoch: 4
   description: Istio operator provides user friendly options to operate the Istio service mesh
   copyright:
     - license: Apache-2.0
@@ -32,7 +32,7 @@ pipeline:
 
   - uses: go/bump
     with:
-      deps: helm.sh/helm/v3@v3.14.2
+      deps: helm.sh/helm/v3@v3.14.2 github.com/go-jose/go-jose/v3@v3.0.3 github.com/lestrrat-go/jwx@v1.2.29
 
   - uses: go/build
     with: