From 732534084b6b2470e5fc52317c314acece6c750f Mon Sep 17 00:00:00 2001 From: "scala-steward-projectglow[bot]" <159218053+scala-steward-projectglow[bot]@users.noreply.github.com> Date: Sun, 25 Jan 2026 00:17:39 +0000 Subject: [PATCH] Update snakeyaml to 2.5 --- build.sbt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.sbt b/build.sbt index 8c49c665f..c1c636b20 100644 --- a/build.sbt +++ b/build.sbt @@ -188,7 +188,7 @@ ThisBuild / coreDependencies := (providedSparkDependencies.value ++ testCoreDepe "io.netty" % "netty-handler" % "4.1.96.Final", "io.netty" % "netty-transport-native-epoll" % "4.1.96.Final", "com.github.samtools" % "htsjdk" % "3.0.5", - "org.yaml" % "snakeyaml" % "2.2", + "org.yaml" % "snakeyaml" % "2.5", "com.univocity" % "univocity-parsers" % "2.9.1", // Fix CVE: Upgrade Avro to 1.11.4+ to fix Arbitrary Code Execution vulnerability "org.apache.avro" % "avro" % "1.11.4"