Skip to content

Update to Psych 3.3.4#7388

Merged
headius merged 1 commit intojruby:jruby-9.3from
chadlwilson:jruby-9.3-bump-psych
Oct 4, 2022
Merged

Update to Psych 3.3.4#7388
headius merged 1 commit intojruby:jruby-9.3from
chadlwilson:jruby-9.3-bump-psych

Conversation

@chadlwilson
Copy link
Contributor

Updates SnakeYAML to 1.33 to address CVE-2022-38752 per #7386

This release updates SnakeYAML to 1.33 to address CVE-2022-38752.
@headius headius added this to the JRuby 9.3.9.0 milestone Oct 2, 2022
@chadlwilson
Copy link
Contributor Author

I think the failing one here might just need a re-run; looks like possibly a flake/timeout.

@headius
Copy link
Member

headius commented Oct 4, 2022

Yeah the MacOS AArch64 builds can be a little flaky. I'm not concerned.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants