You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@geode.apache.org by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2021/10/18 23:56:03 UTC
[jira] [Commented] (GEODE-9751) render.py needs to call
yaml.safe_load instead of yaml.load
[ https://issues.apache.org/jira/browse/GEODE-9751?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17430261#comment-17430261 ]
ASF subversion and git services commented on GEODE-9751:
--------------------------------------------------------
Commit 6a60434984ab131e5910442fb7c29245a1e442e1 in geode's branch refs/heads/develop from Owen Nichols
[ https://gitbox.apache.org/repos/asf?p=geode.git;h=6a60434 ]
GEODE-9751: load yaml vars safely (unsafe load was deprecated and is now removed) (#7016)
> render.py needs to call yaml.safe_load instead of yaml.load
> -----------------------------------------------------------
>
> Key: GEODE-9751
> URL: https://issues.apache.org/jira/browse/GEODE-9751
> Project: Geode
> Issue Type: Bug
> Components: ci
> Affects Versions: 1.12.5, 1.13.5, 1.14.1, 1.15.0
> Reporter: Owen Nichols
> Assignee: Owen Nichols
> Priority: Major
> Labels: needsTriage, pull-request-available
>
> after previously being deprecated, the latest version of pyyaml removes this insecure call (see https://stackoverflow.com/questions/69564817/typeerror-load-missing-1-required-positional-argument-loader-in-google-col). render.py is used in several jobs in our meta pipeline to transform our jinja2 templates into concourse yaml.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)