github
/
halo
mirror of https://github.com/halo-dev/halo
1
0
Fork 0
Code Issues Releases Wiki Activity

Upgrade to SnakeYAML 2.2 (#4819) 

#### What type of PR is this?

/kind cleanup

#### What this PR does / why we need it:

Upgrade to SnakeYAML 2.2.

#### Which issue(s) this PR fixes:

This PR fixes CVE-2022-1471(High-severity vulnerabilities).

<img width="643" alt="image" src="https://github.com/halo-dev/halo/assets/16865714/65a3c2e3-09bb-4592-a9f1-07f72ae05263">

See https://hub.docker.com/layers/halohub/halo/sha-2ccf811/images/sha256-e11fe7550a6b7eef42166b53373b6fe889538db54921fbd83623558286d9270c?context=explore for more.

#### Does this PR introduce a user-facing change?

```release-note
升级 SnakeYAML 至 2.2
```
pull/4821/head
John Niang 2023-11-04 12:48:42 +08:00 committed by GitHub
parent b8755ff3b4
commit caa4d44907
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
gradle.properties
View File

@ -1 +1,2 @@
version=2.11.0-SNAPSHOT
snakeyaml.version=2.2