How to handle different package version between golang plugin and tyk gateway

I have posed this question internally and the reply is that dependencies without go.mod are known to cause conflict for plugins.

There was a quick check to verify this. The workaround to produce a compatible build seems to be by using go-jose/go-jose. Test/go jose by titpetric · Pull Request #5638 · TykTechnologies/tyk · GitHub

Let us know if this works.