[GitHub] [linkis] pjfanning commented on pull request #4274: issue-4273: upgrade to snakeyaml 2.0 due to cve

["pjfanning (via GitHub)" <gi...@apache.org>]

pjfanning commented on PR #4274:
URL: https://github.com/apache/linkis/pull/4274#issuecomment-1445377841

   Looks like we'll need to wait for spring framework to uptake snakeyaml 2.0.
   
   ```
   2023-02-26T14:26:26.8919812Z [ERROR] org.apache.linkis.cs.persistence.dao.ContextKeyListenerMapperTest.removeAllTest  Time elapsed: 0.005 s  <<< ERROR!
   2023-02-26T14:26:26.8920836Z java.lang.NoSuchMethodError: org.yaml.snakeyaml.representer.Representer: method <init>()V not found
   2023-02-26T14:26:26.8921920Z 	at org.springframework.boot.env.OriginTrackedYamlLoader.createYaml(OriginTrackedYamlLoader.java:74)
   2023-02-26T14:26:26.8923110Z 	at org.springframework.boot.env.OriginTrackedYamlLoader.createYaml(OriginTrackedYamlLoader.java:69)
   2023-02-26T14:26:26.8924160Z 	at org.springframework.beans.factory.config.YamlProcessor.process(YamlProcessor.java:162)
   2023-02-26T14:26:26.8925214Z 	at org.springframework.boot.env.OriginTrackedYamlLoader.load(OriginTrackedYamlLoader.java:82)
   2023-02-26T14:26:26.8926275Z 	at org.springframework.boot.env.YamlPropertySourceLoader.load(YamlPropertySourceLoader.java:50)
   2023-02-26T14:26:26.8927440Z 	at org.springframework.boot.context.config.ConfigFileApplicationListener$Loader.loadDocuments(ConfigFileApplicationListener.java:632)
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@linkis.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@linkis.apache.org
For additional commands, e-mail: notifications-help@linkis.apache.org