From 09d9ddb6a8e36d19c3b10ac8e7d0b63563fa3a90 Mon Sep 17 00:00:00 2001 From: "scala-steward-projectglow[bot]" <159218053+scala-steward-projectglow[bot]@users.noreply.github.com> Date: Sun, 15 Mar 2026 00:21:19 +0000 Subject: [PATCH] Update snakeyaml to 2.6 --- build.sbt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.sbt b/build.sbt index 8c49c665f..814601d02 100644 --- a/build.sbt +++ b/build.sbt @@ -188,7 +188,7 @@ ThisBuild / coreDependencies := (providedSparkDependencies.value ++ testCoreDepe "io.netty" % "netty-handler" % "4.1.96.Final", "io.netty" % "netty-transport-native-epoll" % "4.1.96.Final", "com.github.samtools" % "htsjdk" % "3.0.5", - "org.yaml" % "snakeyaml" % "2.2", + "org.yaml" % "snakeyaml" % "2.6", "com.univocity" % "univocity-parsers" % "2.9.1", // Fix CVE: Upgrade Avro to 1.11.4+ to fix Arbitrary Code Execution vulnerability "org.apache.avro" % "avro" % "1.11.4"