Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Move to yaml v3 #14886

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Move to yaml v3 #14886

wants to merge 1 commit into from

Conversation

roidelapluie
Copy link
Member

No description provided.

Signed-off-by: Julien <[email protected]>
@aknuds1
Copy link
Contributor

aknuds1 commented Sep 10, 2024

Tests are failing.

@github-actions github-actions bot added the stale label Nov 11, 2024
@bboreham
Copy link
Member

Hello from the bug-scrub! Could you explain why we want v3, please?
We took a look at the upstream package but, other than being newer and some changes with booleans, we couldn't see any particular recommendation to use one or the other.

@bwplotka
Copy link
Member

bwplotka commented Nov 26, 2024

Seems, the only value of v3 is v2 EOL and perhaps less focus to scan v2 for vuln. Perhaps one thing is that v3 has support for comments though, which is nice in some areas.

We hit similar in other places prometheus/client_golang#1579

Eventually, we have to move though. (:

@bboreham
Copy link
Member

Citation for the EOL statement?

@bwplotka
Copy link
Member

Good point, only some mention that " Our BlackDuck scan shows gopkg.in/yaml.v2 version is EOLed". Can't find official EOL statement.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants