Uses current version of snakeyaml

We only use snakeyaml transitively, but we want to use the current version due to existing CVEs.
NovatecConsulting · Mar 28, 2023 · 2db9555 · 2db9555
1 parent d07dceb
commit 2db9555
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/build.gradle b/build.gradle
@@ -31,6 +31,10 @@ dependencies {
             'org.springframework.boot:spring-boot-starter-actuator',
             'org.springframework.boot:spring-boot-starter-validation',
 
+            // We only use snakeyaml transitively, but we want to force the
+            // current version due to existing CVEs.
+            'org.yaml:snakeyaml:2.0',
+
             'org.apache.commons:commons-text:1.10.0',
             'org.influxdb:influxdb-java'
     )