ruby-jwt dependency is stuck on 2.7.x

[aliismayilov]

Bug description

After seemingly a linter compliance PR, ruby-jwt version constraint changed from 2.x to 2.7.x.

#307

Currently, ruby-jwt has a CVE fix that's available under 2.10.3, but we cannot apply it.

jwt/ruby-jwt#725

Expected behavior

I believe, truelayer-signing gem should depend on jwt v2 and constraint the major upgrades, but not minor.

[faraquet]

@kplattret could you please have a look? This is stopping us from making an important upgrade.

[kplattret]

I have this old PR to update jwt from 2.7 to 3.2, would it help at all?

Unfortunately we have to pin the jwt version because we need to patch some of their functionality for our signing to work.

Let me know and I can merge it this week.

[kplattret]

truelayer-signing 0.3.0 is now out, which should unblock you.

@aliismayilov @faraquet please try it and let me know if you have any trouble. 🙇‍♂️