Backport #499 in 2.18(.1) as well

Author: cowtowncoder

release-notes/VERSION-2.x

@@ -14,6 +14,11 @@ Active Maintainers:
 === Releases ===
 ------------------------------------------------------------------------
 
+2.18.1 (not yet released)
+
+#499: (yaml) SnakeYAML upgrade to 2.3
+ (contributed by @pjfanning)
+
 2.18.0 (26-Sep-2024)
 
 #442: (csv) Allow use of "value decorators" (like `[` and `]` for arrays)

yaml/pom.xml

@@ -34,7 +34,7 @@
     <dependency>
       <groupId>org.yaml</groupId>
       <artifactId>snakeyaml</artifactId>
-      <version>2.2</version>
+      <version>2.3</version>
     </dependency>
 
      <!-- and for testing need annotations; but should be available via `jackson-databind` above