geyanggang opened a new pull request, #11184: URL: https://github.com/apache/gravitino/pull/11184
### What changes were proposed in this pull request? Upgrade the transitive dependency `org.yaml:snakeyaml` from 1.33 to 2.0 by adding a version catalog entry and a global dependency constraint. ### Why are the changes needed? SnakeYAML 1.33 is outdated. Version 2.0 provides improved security defaults and stability. Fix: #11183 ### Does this PR introduce _any_ user-facing change? No. ### How was this patch tested? - Verified dependency resolution via `./gradlew :lineage:dependencies` - Ran `./gradlew :lineage:test` — all tests pass - Ran `./gradlew :server:test` — all tests pass - Confirmed no direct SnakeYAML API usage in Gravitino source code -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
