Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Removed unneeded dependency over YAML v3 #78

Closed
wants to merge 3 commits into from

Conversation

springcomp
Copy link

Fixes #70.
Fixes #71.

This PR removes the embedded internal copy of Testify and relies on the original package instead. By upgrading to a newer version of the package, the YAML v2 vulnerable dependency is no longer needed.

@jehiah
Copy link

jehiah commented Jun 21, 2023

@jamesls do you have thoughts on this? From my eyes it looks ready to land. I would love to see this land to clean up some dependencies (it would also help to update go.mod to 1.17+ before the next release for the changes that triggers in dependency management)

@jehiah
Copy link

jehiah commented Jan 31, 2024

👋 @jamesls I want to check in - is there anything I can do to help get this merged and included in a release?

@springcomp
Copy link
Author

@jehiah I suggest you look at the JmesPath Community-maintained port of this library. It includes this PR, up-to-date dependencies and many more improvements while staying - for all practical purposes - compatible with this library.

@springcomp springcomp closed this Jan 31, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Please migrate to new Yaml Version V3 Fix SNYK-GOLANG-GOPKGINYAMLV3-2841557
2 participants