javadropwizard/dropwizard #6928Not a task: already works

Add support for org.yaml.snakeyaml 2.0

envgap__dropwizard__dropwizard-6928

Original GitHub issue ↗Dated source checkout ↗Opened 2023-03-30

01 / FAILURE SIGNATURE

As reported upstream

Caused by: java.lang.NoSuchMethodError: 'void org.yaml.snakeyaml.parser.ParserImpl.<init>(org.yaml.snakeyaml.reader.StreamReader)'

Not a benchmark task.

The project already builds and runs before the fix, so there is nothing to repair.

02 / ENVIRONMENT RECIPE

Base commit: 4790e7747e53f523689a9900e27263bd8f99590c
Manifest: dropwizard-dependencies/pom.xml
Reproduce: Awaiting issue-specific recipe
Run under trace: Awaiting a meaningful runtime command

03 / ORIGINAL ISSUE TEXT

dropwizard/dropwizard #6928 · read the original issue

I've upgraded snakeyml to version 2.0 and getting an error. Is Dropwizard support it? The old versions of snakeyaml have CVE-2022-1471 vulnerability. 

```

Caused by: java.lang.NoSuchMethodError: 'void org.yaml.snakeyaml.parser.ParserImpl.<init>(org.yaml.snakeyaml.reader.StreamReader)'

	at com.fasterxml.jackson.dataformat.yaml.YAMLParser.<init>(YAMLParser.java:178)

	at com.fasterxml.jackson.dataformat.yaml.YAMLFactory._createParser(YAMLFactory.java:466)

	at com.fasterxml.jackson.dataformat.yaml.YAMLFactory.createParser(YAMLFactory.java:368)

	at com.fasterxml.jackson.dataformat.yaml.YAMLFactory.createParser(YAMLFactory.java:15)

	at io.dropwizard.configuration.BaseConfigurationFactory.createParser(BaseConfigurationFactory.java:113)

```

Continue on GitHub ↗

04 / LABELS

Labels from the report text only; not yet run

No supported category has been assigned.

Label rules and the text that matched

[]