summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorCharles Oliver Nutter <headius@headius.com>2022-09-27 10:11:27 -0500
committerGitHub <noreply@github.com>2022-09-27 10:11:27 -0500
commit2c3708e0a483c6d44ebddaff0b524166f3e7bc78 (patch)
treef1e90279150ba1601d7cda2f1ff5555c25851500
parentb4bd160a2aced131355f4af20f1132fe84099c60 (diff)
parentacbdaf5580ca8fab6235367831bd22160e050b71 (diff)
downloadpsych-4-0-stable.tar.gz
Merge pull request #586 from chadlwilson/backport-4-snakeyaml-133v4.0.64-0-stable
backport (4.x): Bump snakeyaml from 1.31 to 1.33 to resolve CVE-2022-38752 on JRuby
-rw-r--r--lib/psych/versions.rb4
1 files changed, 2 insertions, 2 deletions
diff --git a/lib/psych/versions.rb b/lib/psych/versions.rb
index 877aea3..3709e5e 100644
--- a/lib/psych/versions.rb
+++ b/lib/psych/versions.rb
@@ -2,9 +2,9 @@
module Psych
# The version of Psych you are using
- VERSION = '4.0.5'
+ VERSION = '4.0.6'
if RUBY_ENGINE == 'jruby'
- DEFAULT_SNAKEYAML_VERSION = '1.31'.freeze
+ DEFAULT_SNAKEYAML_VERSION = '1.33'.freeze
end
end