[Bug] upgrade to snakeyaml 2.0 due to cve

[pjfanning]

Search before asking

• I searched the issues and found no similar issues.

Linkis Component

linkis-commons

Steps to reproduce

https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in

Expected behavior

secure lib used

Your environment

• Linkis version used: 1.1.2
• Environment name and version:
  • cdh-5.14.2
  • hdp-3.1.5
  • hive-2.1.1
  • spark-3.2.1
  • scala-2.12.2
  • jdk 1.8.0_121
  • ....

Anything else

No response

Are you willing to submit a PR?

• Yes I am willing to submit a PR!

[github-actions]

😊 Welcome to the Apache Linkis community!!

We are glad that you are contributing by opening this issue.

Please make sure to include all the relevant context.
We will be here shortly.

If you are interested in contributing to our website project, please let us know!
You can check out our contributing guide on
👉 How to Participate in Project Contribution.

Community

WeChat Assistant	WeChat Public Account

Mailing Lists

Name	Description	Subscribe	Unsubscribe	Archive
[email protected]	community activity information	subscribe	unsubscribe	archive

[pjfanning]

Looks like this is blocked because of Spring - see #4274