Bump pyyaml version

As explained in #68, pyyaml is limited to <5.4 version and this version is currently vulnerable. As far we can tell, the use of this library should carry on working without issues. Closes #68
ComplianceAsCode · Nov 2, 2023 · 0076fc8 · 0076fc8
1 parent 7ac86cd
commit 0076fc8
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/CHANGES.md b/CHANGES.md
@@ -1,3 +1,7 @@
+# [0.17.1](https://github.com/ComplianceAsCode/auditree-arboretum/releases/tag/v0.17.1)
+
+- [CHANGED] Bump pyyaml version.
+
 # [0.17.0](https://github.com/ComplianceAsCode/auditree-arboretum/releases/tag/v0.17.0)
 
 - [ADDED] Azure fetchers.

diff --git a/setup.cfg b/setup.cfg
@@ -23,7 +23,7 @@ packages = find:
 install_requires =
     auditree-framework>=1.2.3
     auditree-harvest>=1.0.0
-    pyyaml<5.4
+    pyyaml>=5.4.1
     defusedxml>=0.7.1
     parameterized>=0.8.1