diff --git a/build.gradle b/build.gradle index bd4b66e61..abbfaf4b4 100644 --- a/build.gradle +++ b/build.gradle @@ -78,7 +78,7 @@ ext.versions = [ "okhttp": "4.9.3", // specify this for the SDK build instead of relying on the transitive dependency from okhttp-eventsource "okhttpEventsource": "4.1.0", "slf4j": "1.7.21", - "snakeyaml": "1.32", + "snakeyaml": "2.0", "jedis": "2.9.0" ] diff --git a/src/main/java/com/launchdarkly/sdk/server/integrations/FileDataSourceParsing.java b/src/main/java/com/launchdarkly/sdk/server/integrations/FileDataSourceParsing.java index c6eb2f294..9571c4481 100644 --- a/src/main/java/com/launchdarkly/sdk/server/integrations/FileDataSourceParsing.java +++ b/src/main/java/com/launchdarkly/sdk/server/integrations/FileDataSourceParsing.java @@ -151,7 +151,7 @@ public FlagFileRep parseJson(JsonElement tree) throws FileDataException, IOExcep * */ static final class YamlFlagFileParser extends FlagFileParser { - private static final Yaml yaml = new Yaml(new SafeConstructor(), new Representer()); + private static final Yaml yaml = new Yaml(); // Using SafeConstructor disables instantiation of arbitrary classes - https://github.com/launchdarkly/java-server-sdk/issues/288 private static final Gson gson = new Gson(); private static final JsonFlagFileParser jsonFileParser = new JsonFlagFileParser();