Resteasy is currently using com.github.fge:json-patch:1.9
It has since moved to new groupId and there ware few new releases. https://github.com/java-json-tools/json-patch/releases
Latest one (1.13) also removes guava as dependency.
As bonus we can also get rid of guava by just upgrading to latest version of json-patch which will result in smaller dependency tree and runtime images in case of quarkus.