chore: Bump snakeyaml version to 2.0 (from 1.32). (#74)

GoogleCloudPlatform · May 29, 2023 · 94b1dd0 · 94b1dd0
1 parent 1243e4e
commit 94b1dd0
Show file tree

Hide file tree

Showing 4 changed files with 5 additions and 4 deletions.
diff --git a/WORKSPACE b/WORKSPACE
@@ -36,7 +36,7 @@ maven_install(
         "org.ow2.asm:asm:9.1",
         "org.ow2.asm:asm-commons:9.1",
         "org.ow2.asm:asm-util:9.1",
-        "org.yaml:snakeyaml:1.32",
+        "org.yaml:snakeyaml:2.0",
         "pl.pragmatists:JUnitParams:1.1.1",
     ],
     repositories = [

diff --git a/src/agent/internals/pom.xml b/src/agent/internals/pom.xml
@@ -36,7 +36,7 @@
     <dependency>
       <groupId>org.yaml</groupId>
       <artifactId>snakeyaml</artifactId>
-      <version>1.32</version>
+      <version>2.0</version>
       <scope>compile</scope>
     </dependency>
     <dependency>

diff --git a/...ent/internals/src/main/java/com/google/devtools/cdbg/debuglets/java/YamlConfigParser.java b/...ent/internals/src/main/java/com/google/devtools/cdbg/debuglets/java/YamlConfigParser.java
@@ -24,6 +24,7 @@
 import java.util.List;
 import java.util.Map;
 import java.util.Set;
+import org.yaml.snakeyaml.LoaderOptions;
 import org.yaml.snakeyaml.Yaml;
 import org.yaml.snakeyaml.constructor.SafeConstructor;
 import org.yaml.snakeyaml.error.YAMLException;
@@ -165,7 +166,7 @@ private void addPatternsToSet(Set<String> set, List<Object> patterns)
    * structure.
    */
   private void parseYaml(InputStream yamlConfig) throws YamlConfigParserException {
-    Yaml yaml = new Yaml(new SafeConstructor());
+    Yaml yaml = new Yaml(new SafeConstructor(new LoaderOptions()));
     Set<String> blocklistPatternSet = new HashSet<>();
     Set<String> blocklistExceptionPatternSet = new HashSet<>();
 

diff --git a/src/codegen/pom.xml b/src/codegen/pom.xml
@@ -31,7 +31,7 @@
     <dependency>
       <groupId>org.yaml</groupId>
       <artifactId>snakeyaml</artifactId>
-      <version>1.32</version>
+      <version>2.0</version>
     </dependency>
     <dependency>
       <groupId>com.google.devtools.cdbg.debuglets.java</groupId>