Skip to content

Commit

Permalink
Update snakeyaml to 2.3 (#3024)
Browse files Browse the repository at this point in the history
  • Loading branch information
strehle authored Sep 2, 2024
1 parent a726cb3 commit 0ac2c30
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion dependencies.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ versions.jsonPathVersion = "2.9.0"
// Versions we're overriding from the Spring Boot Bom (Dependabot does not issue PRs to bump these versions, so we need to manually bump them)
ext["mariadb.version"] = "2.7.12" // Bumping to v3 breaks some pipeline jobs (and compatibility with Amazon Aurora MySQL), so pinning to v2 for now. v2 (current version) is stable and will be supported until about September 2025 (https://mariadb.com/kb/en/about-mariadb-connector-j/).
ext["flyway.version"] = "7.15.0" // the next major (v8)'s community edition drops support with MySQL 5.7, which UAA still needs to support. Can bump to v8 once we solve this issue.
ext["snakeyaml.version"] = "2.2" // manual update, see because of missing in spring boot https://github.com/spring-projects/spring-boot/issues/32221
ext["snakeyaml.version"] = "2.3" // manual update, see because of missing in spring boot https://github.com/spring-projects/spring-boot/issues/32221
ext["jackson-bom.version"] = "${versions.jacksonVersion}" // Bumping to latest version because of compatiblity to snakeyaml 2.0
ext["json-path.version"] = "${versions.jsonPathVersion}" // CVE, https://github.com/advisories/GHSA-pfh2-hfmq-phg5
ext["hsqldb.version"] = "2.7.3" // HSQL-DB used for tests but not supported for productive usage
Expand Down

0 comments on commit 0ac2c30

Please sign in to comment.