From 1157014047923b367e7b2017b2fc826c5d9e1ea1 Mon Sep 17 00:00:00 2001
From: OctoBot <101908552+chainguardian@users.noreply.github.com>
Date: Wed, 24 Jan 2024 08:41:56 -0800
Subject: [PATCH] istio-pilot-discovery-fips-1.19/1.19.6-r0: fix
 GHSA-7f9x-gw85-8grf (#1490)

---
 istio-pilot-discovery-fips-1.19.yaml | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/istio-pilot-discovery-fips-1.19.yaml b/istio-pilot-discovery-fips-1.19.yaml
index 7526a458ad..da4779ccd7 100644
--- a/istio-pilot-discovery-fips-1.19.yaml
+++ b/istio-pilot-discovery-fips-1.19.yaml
@@ -1,7 +1,7 @@
 package:
   name: istio-pilot-discovery-fips-1.19
   version: 1.19.6
-  epoch: 0
+  epoch: 1
   description: Istio controller
   copyright:
     - license: Apache-2.0
@@ -12,8 +12,8 @@ package:
 environment:
   contents:
     packages:
-      - ca-certificates-bundle
       - busybox
+      - ca-certificates-bundle
       - go-fips
   environment:
     CGO_ENABLED: "0"
@@ -25,6 +25,10 @@ pipeline:
       tag: ${{package.version}}
       expected-commit: 1e08d21d684dfe61e9746abe24ea9f3c99acde62
 
+  - uses: go/bump
+    with:
+      deps: github.com/lestrrat-go/jwx@v1.2.27
+
   - uses: go/build
     with:
       packages: ./pilot/cmd/pilot-discovery