CGA-2vgx-6rf9-m9h7

This dependency is brought in via a transient dependency. Any attempts to bump to a fixed version of this dependency result in a build failure, hence we will need upstream to update their dependencies in order to fix this issue.

Govulncheck found vulnerable symbols in Go binaries at the following locations: in juicefs-1.3-1.3.0-r1.apk, at usr/bin/juicefs, usr/bin/juicefs.