geyanggang opened a new issue, #11183:
URL: https://github.com/apache/gravitino/issues/11183

   ### What would you like to be improved?
   
   The transitive dependency `org.yaml:snakeyaml` is at version 1.33, which is 
outdated. It should be upgraded to 2.0 for better security and stability.
   
   ### How should we improve?
   
   Add a global dependency constraint in `build.gradle.kts` to force the 
transitive dependency to 2.0. Jackson 2.15.x is fully compatible with SnakeYAML 
2.0.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to