[geode] branch support/1.13 updated: GEODE-9751: load yaml vars safely (unsafe load was deprecated and is now removed) (#7016)

[on...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

onichols pushed a commit to branch support/1.13
in repository https://gitbox.apache.org/repos/asf/geode.git


The following commit(s) were added to refs/heads/support/1.13 by this push:
     new 8bc3021  GEODE-9751: load yaml vars safely (unsafe load was deprecated and is now removed) (#7016)
8bc3021 is described below

commit 8bc3021815e3f2b396ad57ebc39e128ac148e54b
Author: Owen Nichols <34...@users.noreply.github.com>
AuthorDate: Mon Oct 18 16:54:00 2021 -0700

    GEODE-9751: load yaml vars safely (unsafe load was deprecated and is now removed) (#7016)
    
    (cherry picked from commit 6a60434984ab131e5910442fb7c29245a1e442e1)
---
 ci/pipelines/render.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ci/pipelines/render.py b/ci/pipelines/render.py
index a2de4cd..0601acb 100755
--- a/ci/pipelines/render.py
+++ b/ci/pipelines/render.py
@@ -127,7 +127,7 @@ def determine_variables(command_line_variable_options: List[Dict], variables_fil
 def get_variables_from_file(absolute_var_file):
     logging.debug(f"Loading variables from file {absolute_var_file}")
     with open(absolute_var_file, 'r') as variablesFromYml:
-        return yaml.load(variablesFromYml)
+        return yaml.safe_load(variablesFromYml)
 
 
 def get_absolute_dirname(some_path):
@@ -174,7 +174,7 @@ if __name__ == '__main__':
                              "  This option has preference greater than variable files.",
                         nargs="+",
                         default=[],
-                        type=lambda s: yaml.load(s))
+                        type=lambda s: yaml.safe_load(s))
     parser.add_argument("-o",
                         "--output",
                         help="Output file",