[fix]fix security yaml.v3 CVE-2022-28948

[dongjiang1989]

CVE-2022-28948

[dongjiang1989]

@pohly PTAL! when you have time

[pohly]

Not sure whether a CVE for yaml really affects zapr, but these updates seem useful anyway - let's merge.

[dongjiang1989]

Not sure whether a CVE for yaml really affects zapr, but these updates seem useful anyway - let's merge.

Security report：

update yaml.v3 to v3.0.1 version.

@pohly Please release new tag and version. add @dongjiang1989 as a member.

[pohly]

Just because there is a security report doesn't mean that a project is vulnerable... in this case it's clearly not (zapr doesn't do YAML unmarshaling).

[dongjiang1989]

Just because there is a security report doesn't mean that a project is vulnerable... in this case it's clearly not (zapr doesn't do YAML unmarshaling).

I agree! Security report just a security risk, not a real bug. https://github.com/kubernetes-sigs/controller-runtime project import zapr. kubernetes-sigs also just report Stricter Security Checks