[FLINK-19243][build] Enforce snakeyaml 1.27+

deepfield · Sep 23, 2020 · c50b027 · c50b027
1 parent 43bed5d
commit c50b027
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -1610,6 +1610,26 @@ under the License.
  </rules>
  </configuration>
  </execution>
+ <execution>
+ <id>ban-unsafe-snakeyaml</id>
+ <goals>
+ <goal>enforce</goal>
+ </goals>
+ <configuration>
+ <rules>
+ <bannedDependencies>
+ <excludes>
+ <exclude>org.yaml:snakeyaml:(,1.26]</exclude>
+ </excludes>
+ <includes>
+ <!-- Snakeyaml is pulled in by many modules without using it in production,
+ so there's no benefit in us investing time into bumping these. -->
+ <include>org.yaml:snakeyaml:(,1.26]:*:test</include>
+ </includes>
+ </bannedDependencies>
+ </rules>
+ </configuration>
+ </execution>
  <execution>
  <id>ban-unsafe-jackson</id>
  <goals>