Fork me on GitHub
#clj-yaml
<
2023-08-03
>
vxe12:08:50

are there any plans to update to SnakeYaml 2.0 ? I just worked through a dependency bug with the https://github.com/kubernetes-client/java which is using 2.0 and seems incompatible with clj-yaml which is using 1.33. I have a workaround but was wondering if an update is on the horizon. thanks

lread12:08:16

Hi @U5Y86G3KL, yup, we were going to wait for SnakeYAML 2.1. We figured the dust would have settled for 2.x by then. What dependency bug did you hit? Are you referring to the CVE?

lread12:08:39

Or is it just a conflict in deps?

lread12:08:22

According to https://bitbucket.org/snakeyaml/snakeyaml/wiki/Changes they usually release twice a year (Feb and Aug), so maybe a 2.1 release is coming soon.

lread12:08:31

But let us know if you are blocked on this.

vxe12:08:38

hey no worries, just a dependency and i have a workaround, will keep an eye out for the next release, thanks for the quick response

👍 2