snake-yaml to 2.0

apache · Aug 30, 2023 · ce67b60 · ce67b60
1 parent 16b44b1
commit ce67b60
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/kogito-build/kogito-dependencies-bom/pom.xml b/kogito-build/kogito-dependencies-bom/pom.xml
@@ -21,7 +21,7 @@
     <version.org.springframework.boot>2.5.12</version.org.springframework.boot>
 
     <!-- dependencies versions -->
-    <version.com.fasterxml.jackson>2.14.2</version.com.fasterxml.jackson>
+    <version.com.fasterxml.jackson>2.15.0</version.com.fasterxml.jackson>
     <version.com.jayway.jsonpath>2.6.0</version.com.jayway.jsonpath>
     <version.io.quarkiverse.reactivemessaging.http>1.0.0</version.io.quarkiverse.reactivemessaging.http>
     <version.com.github.haifengl.smile>1.5.2</version.com.github.haifengl.smile>
@@ -103,7 +103,7 @@
 
     <!-- CVE-2022-25857: Upgrading snakeyaml until we upgrade to Spring Boot 3.x -->
     <!-- See: https://github.com/spring-projects/spring-boot/issues/32221 -->
-    <snakeyaml.version>1.33</snakeyaml.version>
+    <snakeyaml.version>2.0</snakeyaml.version>
   </properties>
 
   <dependencyManagement>