Dependency convergence failed: nimbus-jose-jwt

Describe the bug

Dependency convergence conflict for com.nimbusds:nimbus-jose-jwt using Spring Security version 3.5.6

To Reproduce

Include in a POM

<dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-security</artifactId> <scope>compile</scope> <version>3.5.6</version> </dependency>

and enable Maven enforcer's dependencyConvergence

should see error:
Dependency convergence error for com.nimbusds:nimbus-jose-jwt:jar:9.37.3. Paths to dependency are: +-com.etc.etc.etc:0.0.1-SNAPSHOT +-org.springframework.boot:spring-boot-starter-oauth2-client:jar:3.5.6:compile +-org.springframework.security:spring-security-oauth2-client:jar:6.5.5:compile +-com.nimbusds:oauth2-oidc-sdk:jar:9.43.6:compile +-com.nimbusds:nimbus-jose-jwt:jar:9.37.3:compile and +-ccom.etc.etc.etc:0.0.1-SNAPSHOT +-org.springframework.boot:spring-boot-starter-oauth2-client:jar:3.5.6:compile +-org.springframework.security:spring-security-oauth2-jose:jar:6.5.5:compile +-com.nimbusds:nimbus-jose-jwt:jar:9.37.4:compile

Expected behavior
Enforcer should not find issues

Has occurred before looks like
https://github.com/spring-projects/spring-security/issues/13843