Update Snakeyaml in Camunda Run to 2.1

[ThorbenLindhauer]

Acceptance Criteria (Required on creation)

• Snakeyaml in Camunda Run is updated to a version >= 2.0

Hints

• We can check if this comes together with Spring Boot 3
• We can check if we can backport this, depending on if Spring Boot 2 is compatible with Snakeyaml 2 by then (see e.g. Loading application.yml fails with NoSuchMethodError when using SnakeYAML 2.0 spring-projects/spring-boot#34405 (comment))

Links

• https://jira.camunda.com/browse/SEC-217
• https://jira.camunda.com/browse/SEC-245
• Support Spring Boot 3.1 #2755

Breakdown

Pull requests

Beta Give feedback

1. chore(parent): bump to snakeyaml 2.1 #3634
   bot:java-dependency-tree ci:run +2
   
2. https://github.com/camunda/camunda-bpm-platform-maintenance/pull/1060
3. https://github.com/camunda/camunda-bpm-platform-maintenance/pull/1061
4. https://github.com/camunda/camunda-bpm-platform-maintenance/pull/1062

Dev2QA handover

• Does this ticket need a QA test and the testing goals are not clear from the description? Add a Dev2QA handover comment

[ThorbenLindhauer]

In Spring Boot, the default version of Snakeyaml will be 2.0 with Spring Boot 3.2.0 due for November (spring-projects/spring-boot#35982). According to spring-projects/spring-framework#30048 (comment), Spring Boot 2.7.10 and higher are compatible with Snakeyaml 2.0, so we can consider overriding the Snakeyaml version in Run for those Camunda versions that use respective Spring Boot versions.

[yanavasileva]

No license change, still Apache 2.0.
No problems detected so update Snakeyaml to 2.1 (released on 4th of August 2023) on 7.20-7.17.

[yanavasileva]

To reviewer: not urgent, can wait for next week as well.