Please migrate to new Yaml Version V3

[reachlakstar]

FORTIFY is throwing vulnerability with Yaml V2, can you please migrate to V3

[brackendawson]

v1.8.0 does not use Yaml V2:

% go mod why -m "gopkg.in/yaml.v2"
# gopkg.in/yaml.v2
(main module does not need module gopkg.in/yaml.v2)

And nancy is happy:

% go list -json -deps | nancy sleuth
Checking for updates...
Already up-to-date.
┏━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┓
┃ Summary                     ┃
┣━━━━━━━━━━━━━━━━━━━━━━━━━┳━━━┫
┃ Audited Dependencies    ┃ 4 ┃
┣━━━━━━━━━━━━━━━━━━━━━━━━━╋━━━┫
┃ Vulnerable Dependencies ┃ 0 ┃
┗━━━━━━━━━━━━━━━━━━━━━━━━━┻━━━┛

What version of testify are you using?