Upgrade snakeyaml to 2.0

[labianchin]

Includes CVE fix https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in for https://nvd.nist.gov/vuln/detail/CVE-2022-1471

Did you remember to?

• Add test case(s)
• Update CHANGES.txt
• Auto applied styling via ./gradlew autostyleApply

We encourage pull requests that:

• Add new features to TestNG (or)
• Fix bugs in TestNG

If your pull request involves fixing SonarQube issues then we would suggest that you please discuss this with the
TestNG-dev before you spend time working on it.

Note: For more information on contribution guidelines please make sure you refer our Contributing section for detailed set of steps.

[caesar-ralf]

just adding my approval, although probably counts to nothing haha but we would love this change to go out with the security fix

[krmahadevan]

@caesar-ralf this upgrade is causing compilation errors. All tests failed.

[krmahadevan]

Can you pls help fix the compilation errors?

[labianchin]

Can you pls help fix the compilation errors?

Yes, I think now it is fixed. PTAL @krmahadevan .

[labianchin]

Most build actions are green, but some did fail. The problem is not obvious to me. I do wonder if something is flaky and if we can re-run those tests.

I appreciate any quick help here. I have never used testng (yet), neither I am familiar with the codebase or build setup here.

[juherr]

No worry, we have random failures in very specific environments.

[labianchin]

Thanks for the help @krmahadevan and @juherr !

Any chance we can have a release with those changes?

[krmahadevan]

Yes. There should be a release in a week or so. Waiting for one more in flight PR to be ready for merge.