upgrade snakeyaml to v1.30 due to cve (#2041)
diff --git a/helix-common/helix-common-1.0.3-SNAPSHOT.ivy b/helix-common/helix-common-1.0.3-SNAPSHOT.ivy
index 1b90893..9474509 100644
--- a/helix-common/helix-common-1.0.3-SNAPSHOT.ivy
+++ b/helix-common/helix-common-1.0.3-SNAPSHOT.ivy
@@ -43,7 +43,7 @@
<dependency org="org.apache.logging.log4j" name="log4j-slf4j-impl" rev="2.17.1" force="true" conf="compile->compile(*),master(*);runtime->runtime(*)">
<artifact name="log4j-slf4j-impl" ext="jar"/>
</dependency>
- <dependency org="org.yaml" name="snakeyaml" rev="1.12" conf="compile->compile(default);runtime->runtime(default);default->default"/>
+ <dependency org="org.yaml" name="snakeyaml" rev="1.30" conf="compile->compile(default);runtime->runtime(default);default->default"/>
<dependency org="com.fasterxml.jackson.core" name="jackson-databind" rev="2.11.0" force="true" conf="compile->compile(*),master(*);runtime->runtime(*)"/>
<dependency org="com.fasterxml.jackson.core" name="jackson-core" rev="2.11.0" force="true" conf="compile->compile(*),master(*);runtime->runtime(*)"/>
<dependency org="commons-cli" name="commons-cli" rev="1.2" force="true" conf="compile->compile(*),master(*);runtime->runtime(*)"/>
diff --git a/helix-core/helix-core-1.0.3-SNAPSHOT.ivy b/helix-core/helix-core-1.0.3-SNAPSHOT.ivy
index b2a6344..5809325 100755
--- a/helix-core/helix-core-1.0.3-SNAPSHOT.ivy
+++ b/helix-core/helix-core-1.0.3-SNAPSHOT.ivy
@@ -60,7 +60,7 @@
<dependency org="commons-math" name="commons-math" rev="2.1" conf="compile->compile(default);runtime->runtime(default);default->default"/>
<dependency org="org.apache.commons" name="commons-math3" rev="3.6.1" conf="compile->compile(default);runtime->runtime(default);default->default"/>
<dependency org="com.google.guava" name="guava" rev="15.0" conf="compile->compile(default);runtime->runtime(default);default->default"/>
- <dependency org="org.yaml" name="snakeyaml" rev="1.12" conf="compile->compile(default);runtime->runtime(default);default->default"/>
+ <dependency org="org.yaml" name="snakeyaml" rev="1.30" conf="compile->compile(default);runtime->runtime(default);default->default"/>
<dependency org="commons-logging" name="commons-logging-api" rev="1.1" conf="compile->compile(*),master(*);runtime->runtime(*)"/>
<dependency org="io.dropwizard.metrics" name="metrics-core" rev="4.1.14" conf="compile->compile(default);runtime->runtime(default);default->default"/>
</dependencies>
diff --git a/helix-core/pom.xml b/helix-core/pom.xml
index c9fb06d..28ddb02 100755
--- a/helix-core/pom.xml
+++ b/helix-core/pom.xml
@@ -129,7 +129,7 @@
<dependency>
<groupId>org.yaml</groupId>
<artifactId>snakeyaml</artifactId>
- <version>1.12</version>
+ <version>1.30</version>
</dependency>
<dependency>
<groupId>io.dropwizard.metrics</groupId>
diff --git a/helix-rest/helix-rest-1.0.3-SNAPSHOT.ivy b/helix-rest/helix-rest-1.0.3-SNAPSHOT.ivy
index 870c6a7..31fe426 100644
--- a/helix-rest/helix-rest-1.0.3-SNAPSHOT.ivy
+++ b/helix-rest/helix-rest-1.0.3-SNAPSHOT.ivy
@@ -43,7 +43,7 @@
<dependency org="org.apache.logging.log4j" name="log4j-slf4j-impl" rev="2.17.1" force="true" conf="compile->compile(*),master(*);runtime->runtime(*)">
<artifact name="log4j-slf4j-impl" ext="jar"/>
</dependency>
- <dependency org="org.yaml" name="snakeyaml" rev="1.17">
+ <dependency org="org.yaml" name="snakeyaml" rev="1.30">
<artifact name="snakeyaml" m:classifier="sources" ext="jar"/>
</dependency>
<dependency org="org.apache.helix" name="helix-core" rev="1.0.3-SNAPSHOT" force="true" conf="compile->compile(*),master(*);runtime->runtime(*)"/>
diff --git a/helix-rest/pom.xml b/helix-rest/pom.xml
index 1c4c6ab..99d4694 100644
--- a/helix-rest/pom.xml
+++ b/helix-rest/pom.xml
@@ -53,7 +53,7 @@
<dependency>
<groupId>org.yaml</groupId>
<artifactId>snakeyaml</artifactId>
- <version>1.17</version>
+ <version>1.30</version>
</dependency>
<dependency>
<groupId>org.slf4j</groupId>
diff --git a/metadata-store-directory-common/metadata-store-directory-common-1.0.3-SNAPSHOT.ivy b/metadata-store-directory-common/metadata-store-directory-common-1.0.3-SNAPSHOT.ivy
index 3a305fd..43d102a 100644
--- a/metadata-store-directory-common/metadata-store-directory-common-1.0.3-SNAPSHOT.ivy
+++ b/metadata-store-directory-common/metadata-store-directory-common-1.0.3-SNAPSHOT.ivy
@@ -43,7 +43,7 @@
<dependency org="org.apache.logging.log4j" name="log4j-slf4j-impl" rev="2.17.1" force="true" conf="compile->compile(*),master(*);runtime->runtime(*)">
<artifact name="log4j-slf4j-impl" ext="jar"/>
</dependency>
- <dependency org="org.yaml" name="snakeyaml" rev="1.17">
+ <dependency org="org.yaml" name="snakeyaml" rev="1.30">
<artifact name="snakeyaml" m:classifier="sources" ext="jar"/>
</dependency>
<dependency org="org.apache.helix" name="helix-core" rev="1.0.3-SNAPSHOT" force="true" conf="compile->compile(*),master(*);runtime->runtime(*)"/>
diff --git a/metadata-store-directory-common/pom.xml b/metadata-store-directory-common/pom.xml
index 5211ad0..03de149 100644
--- a/metadata-store-directory-common/pom.xml
+++ b/metadata-store-directory-common/pom.xml
@@ -80,7 +80,7 @@
<dependency>
<groupId>org.yaml</groupId>
<artifactId>snakeyaml</artifactId>
- <version>1.17</version>
+ <version>1.30</version>
<scope>compile</scope>
</dependency>
<dependency>
