[fix][sec] Upgrade jose4j to 0.9.6 to address CVE-2024-29371 (#25095)

Author: lhotari

distribution/server/src/assemble/LICENSE.bin.txt

@@ -264,7 +264,7 @@ The Apache Software License, Version 2.0
  * Conscrypt -- org.conscrypt-conscrypt-openjdk-uber-2.5.2.jar
  * Fastutil -- it.unimi.dsi-fastutil-8.5.16.jar
  * Proto Google Common Protos -- com.google.api.grpc-proto-google-common-protos-2.59.2.jar
- * Bitbucket -- org.bitbucket.b_c-jose4j-0.9.4.jar
+ * Bitbucket -- org.bitbucket.b_c-jose4j-0.9.6.jar
  * Gson
     - com.google.code.gson-gson-2.13.2.jar
     - io.gsonfire-gson-fire-1.9.0.jar

pom.xml

@@ -284,7 +284,7 @@ flexible messaging model and an intuitive client API.</description>
     <jakarta.validation.version>2.0.2</jakarta.validation.version>
     <jna.version>5.12.1</jna.version>
     <kubernetesclient.version>23.0.0</kubernetesclient.version>
-    <jose4j.version>0.9.4</jose4j.version>
+    <jose4j.version>0.9.6</jose4j.version>
     <okhttp3.version>5.3.1</okhttp3.version>
     <!-- use okio version that matches the okhttp3 version -->
     <okio.version>3.16.3</okio.version>