Uploaded image for project: 'Quarkus'
  1. Quarkus
  2. QUARKUS-2859

Bump snakeyaml from 1.30 to 1.31

XMLWordPrintable

    • Icon: Component Upgrade Component Upgrade
    • Resolution: Done
    • Icon: Major Major
    • 2.7.7.GA
    • None
    • team/eng

      Bumps [snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) from 1.30 to 1.31.
      <details>
      <summary>Commits</summary>
      <ul>
      <li><a href="https://bitbucket.org/snakeyaml/snakeyaml/commits/a3e641b8d6337d9916b5d709278fd668b0eb8507"><code>a3e641b</code></a> Remove unused code for comments</li>
      <li><a href="https://bitbucket.org/snakeyaml/snakeyaml/commits/d2ed56802d388afb4c714325e41afa8e095478b4"><code>d2ed568</code></a> Remove unused code</li>
      <li><a href="https://bitbucket.org/snakeyaml/snakeyaml/commits/ab76f8678972f5eb3caaf3b473e63323bcea9e92"><code>ab76f86</code></a> Add <a href="https://github.com/Deprecated"><code>@​Deprecated</code></a> annotation to constructs marked with <a href="https://github.com/deprecated"><code>@​deprecated</code></a> javadoc.</li>
      <li><a href="https://bitbucket.org/snakeyaml/snakeyaml/commits/bc7869b53e27caed452894986c5ee7c4b787a725"><code>bc7869b</code></a> Make billionLaughsAttackTest.billionLaughsAttackExpanded() robust</li>
      <li><a href="https://bitbucket.org/snakeyaml/snakeyaml/commits/4cfb7b78ac9d414590da53557314ae97691dd63e"><code>4cfb7b7</code></a> Merged in make-billion-laughs-attack-test-robust (pull request <a href="https://bitbucket.org/snakeyaml/snakeyaml/issues/7">#7</a>)</li>
      <li><a href="https://bitbucket.org/snakeyaml/snakeyaml/commits/da5ba160027ec9943d3cd3a67950ca57c15011b7"><code>da5ba16</code></a> Update changes.xml</li>
      <li><a href="https://bitbucket.org/snakeyaml/snakeyaml/commits/23fbcef0e952adbea3fc147c6b17eb8ab7e3432a"><code>23fbcef</code></a> add test with JavaBean property of parameterized Collection</li>
      <li><a href="https://bitbucket.org/snakeyaml/snakeyaml/commits/6385279ecb0b3ec623563ba934475eab100fb25e"><code>6385279</code></a> change how we set detected type to JavaBean Collection property item</li>
      <li><a href="https://bitbucket.org/snakeyaml/snakeyaml/commits/04687842700919db5ba4baf176abf9b044b32a45"><code>0468784</code></a> force keyNode to be String for JavaBeans</li>
      <li><a href="https://bitbucket.org/snakeyaml/snakeyaml/commits/467bcc9d06c6914e334b4c4052fa8aa27f092721"><code>467bcc9</code></a> expect node to be scalar when enforcings String keys</li>
      <li>Additional commits viewable in <a href="https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-1.31..snakeyaml-1.30">compare view</a></li>
      </ul>
      </details>
      <br />

      [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.yaml:snakeyaml&package-manager=maven&previous-version=1.30&new-version=1.31)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

      You can trigger a rebase of this PR by commenting `@dependabot rebase`.

      //: # (dependabot-automerge-start)
      //: # (dependabot-automerge-end)

      <details>
      <summary>Dependabot commands and options</summary>
      <br />

      You can trigger Dependabot actions by commenting on this PR:

      • `@dependabot rebase` will rebase this PR
      • `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
      • `@dependabot merge` will merge this PR after your CI passes on it
      • `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
      • `@dependabot cancel merge` will cancel a previously requested merge and block automerging
      • `@dependabot reopen` will reopen this PR if it is closed
      • `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
      • `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
      • `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
      • `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

      </details>

              Unassigned Unassigned
              probinso_jira Quarkus JIRA Bot (Inactive)
              Fedor Dudinskii Fedor Dudinskii
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: