I have posed this question internally and the reply is that dependencies without go.mod are known to cause conflict for plugins.
There was a quick check to verify this. The workaround to produce a compatible build seems to be by using go-jose/go-jose. Test/go jose by titpetric · Pull Request #5638 · TykTechnologies/tyk · GitHub
Let us know if this works.