NIFI-8988 Upgraded SnakeYAML to 1.29

- Updated MiNiFi references to use shared parent dependency version
- Updated direct dependencies from 1.28 to 1.29
- Added dependency management declarations where necessary to override transitive versions

Signed-off-by: Pierre Villard <pierre.villard.fr@gmail.com>

This closes #5275.

minifi/minifi-bootstrap/pom.xml

@@ -63,7 +63,6 @@ limitations under the License.
         <dependency>
             <groupId>org.yaml</groupId>
             <artifactId>snakeyaml</artifactId>
-            <version>1.17</version>
         </dependency>
         <dependency>
             <groupId>org.apache.nifi.minifi</groupId>

minifi/minifi-c2/minifi-c2-service/pom.xml

@@ -70,7 +70,6 @@ limitations under the License.
         <dependency>
             <groupId>org.yaml</groupId>
             <artifactId>snakeyaml</artifactId>
-            <version>1.17</version>
             <scope>provided</scope>
         </dependency>
         <dependency>

minifi/minifi-commons/minifi-commons-schema/pom.xml

@@ -28,7 +28,6 @@
         <dependency>
             <groupId>org.yaml</groupId>
             <artifactId>snakeyaml</artifactId>
-            <version>1.17</version>
         </dependency>
         <dependency>
             <groupId>org.apache.nifi</groupId>

minifi/pom.xml

@@ -270,6 +270,11 @@ limitations under the License.
                 <version>2.3.3</version>
                 <scope>provided</scope>
             </dependency>
+            <dependency>
+                <groupId>org.yaml</groupId>
+                <artifactId>snakeyaml</artifactId>
+                <version>1.29</version>
+            </dependency>
 
             <!-- NiFi Modules -->
             <dependency>

nifi-nar-bundles/nifi-druid-bundle/pom.xml

@@ -64,6 +64,12 @@
                 <artifactId>jackson-databind</artifactId>
                 <version>${jackson.version}</version>
             </dependency>
+            <!-- Override snakeyaml:1.11 from druid -->
+            <dependency>
+                <groupId>org.yaml</groupId>
+                <artifactId>snakeyaml</artifactId>
+                <version>1.29</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>
 

nifi-nar-bundles/nifi-easyrules-bundle/nifi-easyrules-service/pom.xml

@@ -35,7 +35,7 @@
         <dependency>
             <groupId>org.yaml</groupId>
             <artifactId>snakeyaml</artifactId>
-            <version>1.28</version>
+            <version>1.29</version>
         </dependency>
         <dependency>
             <groupId>org.apache.nifi</groupId>

nifi-nar-bundles/nifi-elasticsearch-bundle/pom.xml

@@ -37,6 +37,12 @@ language governing permissions and limitations under the License. -->
 
     <dependencyManagement>
         <dependencies>
+            <!-- Override snakeyaml:1.15 from elasticsearch -->
+            <dependency>
+                <groupId>org.yaml</groupId>
+                <artifactId>snakeyaml</artifactId>
+                <version>1.29</version>
+            </dependency>
             <dependency>
                 <groupId>org.apache.nifi</groupId>
                 <artifactId>nifi-elasticsearch-processors</artifactId>

nifi-nar-bundles/nifi-graph-bundle/pom.xml

@@ -39,6 +39,12 @@
 
     <dependencyManagement>
         <dependencies>
+            <!-- Override snakeyaml:1.15 -->
+            <dependency>
+                <groupId>org.yaml</groupId>
+                <artifactId>snakeyaml</artifactId>
+                <version>1.29</version>
+            </dependency>
             <dependency>
                 <groupId>org.apache.nifi</groupId>
                 <artifactId>nifi-graph-processors</artifactId>

nifi-nar-bundles/nifi-hive-bundle/pom.xml

@@ -73,6 +73,12 @@
                 <artifactId>jackson-core</artifactId>
                 <version>${jackson.version}</version>
             </dependency>
+            <!-- Override snakeyaml:1.17 -->
+            <dependency>
+                <groupId>org.yaml</groupId>
+                <artifactId>snakeyaml</artifactId>
+                <version>1.29</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>
 

nifi-nar-bundles/nifi-ranger-bundle/pom.xml

@@ -41,6 +41,12 @@
                 <artifactId>commons-io</artifactId>
                 <version>2.10.0</version>
             </dependency>
+            <!-- Override snakeyaml:1.17 from ranger -->
+            <dependency>
+                <groupId>org.yaml</groupId>
+                <artifactId>snakeyaml</artifactId>
+                <version>1.29</version>
+            </dependency>
             <!-- Override jackson-databind 2.9.10.4 from ranger -->
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>

nifi-nar-bundles/nifi-rules-action-handler-bundle/pom.xml

@@ -46,6 +46,12 @@
                 <artifactId>jackson-core</artifactId>
                 <version>${jackson.version}</version>
             </dependency>
+            <!-- Override snakeyaml:1.23 -->
+            <dependency>
+                <groupId>org.yaml</groupId>
+                <artifactId>snakeyaml</artifactId>
+                <version>1.29</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>
 

nifi-nar-bundles/nifi-sql-reporting-bundle/pom.xml

@@ -32,6 +32,12 @@
                 <artifactId>nifi-sql-reporting-tasks</artifactId>
                 <version>1.15.0-SNAPSHOT</version>
             </dependency>
+            <!-- Override snakeyaml:1.23 -->
+            <dependency>
+                <groupId>org.yaml</groupId>
+                <artifactId>snakeyaml</artifactId>
+                <version>1.29</version>
+            </dependency>
             <!-- Override jackson-databind 2.9.9.3 from calcite-core -->
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>

nifi-nar-bundles/nifi-standard-bundle/pom.xml

@@ -371,6 +371,11 @@
                 <artifactId>avro</artifactId>
                 <version>1.8.1</version>
             </dependency>
+            <dependency>
+                <groupId>org.yaml</groupId>
+                <artifactId>snakeyaml</artifactId>
+                <version>1.29</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>
 </project>

nifi-registry/nifi-registry-core/nifi-registry-framework/pom.xml

@@ -331,7 +331,7 @@
         <dependency>
             <groupId>org.yaml</groupId>
             <artifactId>snakeyaml</artifactId>
-            <version>1.28</version>
+            <version>1.29</version>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>

nifi-registry/nifi-registry-extensions/nifi-registry-ranger/pom.xml

@@ -49,6 +49,12 @@
                 <artifactId>jackson-core</artifactId>
                 <version>${jackson.version}</version>
             </dependency>
+            <!-- Override snakeyaml:1.17 -->
+            <dependency>
+                <groupId>org.yaml</groupId>
+                <artifactId>snakeyaml</artifactId>
+                <version>1.29</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>
 </project>