### What changes were proposed in this pull request? Update the snakeyaml version from 1.33 to 2.2 reducing direct CVE vulnerabilities. ### Why are the changes needed? The snakeyaml version has the follow CVE vulnerabilities, see https://scout.docker.com/vulnerabilities/id/CVE-2022-1471 ### Does this PR introduce _any_ user-facing change? No any user-facing change ### How was this patch tested? ./build/make-distribution.sh to package and run test on the local. Closes #2170 from dev-lpq/snakeyaml_version. Authored-by: pengqli <pengqli@cisco.com> Signed-off-by: Cheng Pan <chengpan@apache.org> |
||
|---|---|---|
| .. | ||
| deps | ||
| checkout_pr.sh | ||
| dependencies.sh | ||
| merge_pr.py | ||
| reformat | ||