oras icon indicating copy to clipboard operation
oras copied to clipboard

Migrate from deprecated `gopkg.in/yaml.v3` to `go.yaml.in/yaml/v3` maintained package

Open bupd opened this issue 1 month ago • 3 comments

Summary

We currently use gopkg.in/yaml.v3, which is now deprecated. The YAML organization provides an officially maintained, drop-in compatible replacement at go.yaml.in/yaml/v3. This yaml package is fully identical to go-yaml/yaml, actively maintained, and receives security updates.

  • List of places where this is declared - https://github.com/search?q=repo%3Aoras-project%2Foras+gopkg.in%2Fyaml.v&type=code

References

Task

  • Update all imports and usage from gopkg.in/yaml.v3 to go.yaml.in/yaml/v4 across the codebase.

bupd avatar Dec 06 '25 17:12 bupd

please label this to good-first-issue

bupd avatar Dec 06 '25 17:12 bupd

Thanks, good call. Were you going to raise a PR?

TerryHowe avatar Dec 06 '25 18:12 TerryHowe

@TerryHowe Thanks for the quick reply. I opened #1922 which will fix this.

bupd avatar Dec 06 '25 19:12 bupd