celeborn/dev
pengqli a808c252ba
[CELEBORN-1184] Update the snakeyaml version from 1.33 to 2.2
### What changes were proposed in this pull request?
Update the snakeyaml version from 1.33 to 2.2 reducing direct CVE vulnerabilities.

### Why are the changes needed?
The snakeyaml version has the follow CVE vulnerabilities, see
https://scout.docker.com/vulnerabilities/id/CVE-2022-1471

### Does this PR introduce _any_ user-facing change?
No any user-facing change

### How was this patch tested?
./build/make-distribution.sh to package and run test on the local.

Closes #2170 from dev-lpq/snakeyaml_version.

Authored-by: pengqli <pengqli@cisco.com>
Signed-off-by: Cheng Pan <chengpan@apache.org>
2023-12-20 21:23:22 +08:00
..
deps [CELEBORN-1184] Update the snakeyaml version from 1.33 to 2.2 2023-12-20 21:23:22 +08:00
checkout_pr.sh [INFRA] Inroduce checkout_pr.sh shell script (#968) 2022-11-14 22:28:43 +08:00
dependencies.sh [CELEBORN-1092] Introduce JVM monitoring in Celeborn Worker using JVMQuake 2023-11-28 20:45:08 +08:00
merge_pr.py [CELEBORN-937][INFRA] Improve branch suggestion for backporting 2023-09-01 00:20:42 +08:00
reformat [CELEBORN-1105][FLINK] Support Flink 1.18 2023-11-06 15:53:39 +08:00