From caa4d4490760fdb8bb6f78859226b0425271e027 Mon Sep 17 00:00:00 2001 From: John Niang Date: Sat, 4 Nov 2023 12:48:42 +0800 Subject: [PATCH] Upgrade to SnakeYAML 2.2 (#4819) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit #### What type of PR is this? /kind cleanup #### What this PR does / why we need it: Upgrade to SnakeYAML 2.2. #### Which issue(s) this PR fixes: This PR fixes CVE-2022-1471(High-severity vulnerabilities). image See https://hub.docker.com/layers/halohub/halo/sha-2ccf811/images/sha256-e11fe7550a6b7eef42166b53373b6fe889538db54921fbd83623558286d9270c?context=explore for more. #### Does this PR introduce a user-facing change? ```release-note 升级 SnakeYAML 至 2.2 ``` --- gradle.properties | 1 + 1 file changed, 1 insertion(+) diff --git a/gradle.properties b/gradle.properties index f9face1e9..5fb5d935d 100644 --- a/gradle.properties +++ b/gradle.properties @@ -1 +1,2 @@ version=2.11.0-SNAPSHOT +snakeyaml.version=2.2