compose-go icon indicating copy to clipboard operation
compose-go copied to clipboard

Published 20 hours ago • verified publisher icon compose-spec

[WiP] adopt goyaml/v3

Open ndeloof opened this issue 3 years ago • 4 comments

Adopting go.yaml/v3 will bring support for yaml 1.2 schema

this PR require https://github.com/go-yaml/yaml/pull/753

ndeloof avatar Jul 01 '21 08:07 ndeloof

What's current status of this? I saw v3.0.0 was released recently.

AkihiroSuda avatar May 26 '22 04:05 AkihiroSuda

I didn't noticed the v3.0.0 release, this is something we should consider for next release, wdyt @glours @ulyssessouza ?

ndeloof avatar May 30 '22 07:05 ndeloof

One of the reasons to adopt v3 would be that v2 has a vulnerability https://nvd.nist.gov/vuln/detail/CVE-2019-11254 . Very unlikely to affect compose-go, but scanning tools are noisy about this CVE.

AkihiroSuda avatar Jun 18 '22 03:06 AkihiroSuda

Is there any blocker to get this merged? 🙏

AkihiroSuda avatar Jul 23 '22 17:07 AkihiroSuda

updated with recent v3.0.1 release, still missing https://github.com/go-yaml/yaml/pull/753

ndeloof avatar Nov 15 '22 09:11 ndeloof