griffindvs opened a new pull request, #4376: URL: https://github.com/apache/cassandra/pull/4376
[CASSANDRA-18875](https://issues.apache.org/jira/browse/CASSANDRA-18875) [CASSANDRA-17907](https://issues.apache.org/jira/browse/CASSANDRA-17907) This PR back-ports 64ae866 for cassandra-5.0. The original commit was reverted in 8cd0690 and un-reverted in 7204bc4. Jackson databind, core, and datatype were already updated to a newer 2.19.2 in af0197e. 2.15.3 of jackson.dataformat [uses](https://github.com/FasterXML/jackson-dataformats-text/blob/jackson-dataformats-text-2.15.3/yaml/pom.xml#L37) a matching version 2.1 of snakeyaml. There were no backwards-incompatible changes in the intervening versions of jackson-dataformat-yaml. snakeyaml 2.0 [included](https://bitbucket.org/snakeyaml/snakeyaml/wiki/Changes) a few backwards-incompatible changes: * [Global tags are disabled by default](https://bitbucket.org/snakeyaml/snakeyaml/issues/565/do-not-allow-global-tags-by-default) * [Standard tags](https://yaml.org/type/index.html) are always enabled * I wouldn't expect non-standard global tags to be used in Cassandra configuration files * [yaml.loadAs() supports Class<? super T> type instead of Class<T>](https://bitbucket.org/snakeyaml/snakeyaml/issues/556/update-yamlloadas-signature-to-support) * This does not affect our usage * Removal of deprecated methods * [Removal of deprecated methods in FlowStyle](https://bitbucket.org/snakeyaml/snakeyaml/commits/2190f92af4cbe3507bd8c6f87bd6e7b0582f4318) * This does not affect our usage * [Removal of deprecated constructors](https://bitbucket.org/snakeyaml/snakeyaml/commits/3e755d254aeaa902675053047fd53368a175565a) * This change is covered in the PR through the usage of constructors with loader options * The default loader options used here include a 64 MiB limit for configuration files * The default limit of 3 MiB was [delivered in 1.32](https://bitbucket.org/snakeyaml/snakeyaml/pull-requests/22) snakeyaml 2.1 [included](https://bitbucket.org/snakeyaml/snakeyaml/wiki/Changes) one backwards-incompatible change: * [Removal of Trusted*Inspector classes](https://bitbucket.org/snakeyaml/snakeyaml/commits/39a4b874c70ddf8beb0b73c4092ea1c700cc66df) * Does not affect our usage -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]

