util: upgrade snakeyaml due to cve

Signed-off-by: Kyle Bahr <[email protected]> Problem/Solution: upgrade snakeyaml version to 1.28 Result Closes #301 JIRA Issues: CSL-12126 Differential Revision: https://phabricator.twitter.biz/D930268
twitter · Jul 20, 2022 · d486a7d · d486a7d
1 parent f12c50a
commit d486a7d
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/CHANGELOG.rst b/CHANGELOG.rst
@@ -7,6 +7,8 @@ Note that ``PHAB_ID=#`` and ``RB_ID=#`` correspond to associated messages in com
 Unreleased
 ----------
 
+* util: Update snakeyaml to 1.28 ``PHAB_ID=D930268``
+
 Breaking API Changes
 ~~~~~~~~~~~~~~~~~~~~
 

diff --git a/build.sbt b/build.sbt
@@ -26,7 +26,7 @@ val caffeineLib = "com.github.ben-manes.caffeine" % "caffeine" % "2.9.3"
 val jsr305Lib = "com.google.code.findbugs" % "jsr305" % "2.0.1"
 val scalacheckLib = "org.scalacheck" %% "scalacheck" % "1.15.4" % "test"
 val slf4jApi = "org.slf4j" % "slf4j-api" % slf4jVersion
-val snakeyaml = "org.yaml" % "snakeyaml" % "1.24"
+val snakeyaml = "org.yaml" % "snakeyaml" % "1.28"
 
 def travisTestJavaOptions: Seq[String] = {
   // We have some custom configuration for the Travis environment