rm pinned snakeyaml dependency

not necessary anymore since spring upgraded to snakeyaml 2.0
JKatzwinkel · Aug 6, 2023 · 8047fc4 · 8047fc4
1 parent 79db0bb
commit 8047fc4
Showing 1 changed file with 0 additions and 3 deletions.
diff --git a/build.gradle b/build.gradle
@@ -67,7 +67,6 @@ publishing {
 
 repositories {
     mavenCentral()
-    maven { url 'https://plugins.gradle.org/m2/' }
     maven { url 'https://jitpack.io' }
     maven { url 'https://repo.spring.io/milestone' }
 }
@@ -93,8 +92,6 @@ dependencies {
     implementation 'org.springframework.boot:spring-boot-starter-thymeleaf:3.2.0-M1'
     implementation 'nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect:3.2.1'
     implementation 'org.apache.commons:commons-lang3:3.13.0'
-    // for CVE-2022-1471, likely redundant with some future spring-boot release:
-    implementation 'org.yaml:snakeyaml:2.0'
 
     implementation 'com.github.jkatzwinkel:tla-common:main-SNAPSHOT'
     implementation('com.github.rosmord.jsesh:jsesh:release-7.6.1') {