Merge pull request #54 from jfrog/upgrade-yaml-module

Upgrade gopkg.in/yaml.v3 to v3.0.0

CHANGELOG.md

@@ -1,3 +1,9 @@
+## 1.1.5 (May 27, 2022). Tested on Artifactory 7.38.10 and Xray 3.49.0
+
+IMPROVEMENTS:
+
+* Upgrade `gopkg.in/yaml.v3` to v3.0.0 for [CVE-2022-28948](https://nvd.nist.gov/vuln/detail/CVE-2022-28948) [GH-54](https://github.com/jfrog/terraform-provider-xray/pull/54)
+
 ## 1.1.4 (May 24, 2022). Tested on Artifactory 7.38.10 and Xray 3.49.0
 
 BUG FIX:
@@ -23,30 +29,30 @@ IMPROVEMENTS:
 
 IMPROVEMENTS:
 
-* documentation reorganized, added subcategories and templates. 
+* documentation reorganized, added subcategories and templates.
 [GH-44](https://github.com/jfrog/terraform-provider-xray/pull/44).
 
 
 ## 1.1.0 (Apr 15, 2022). Tested on Artifactory 7.37.14 and Xray 3.47.3
 
 IMPROVEMENTS:
 
-* added `fix_version_dependant` field to `xray_security_policy` resource. The field introduced in Xray 3.44.1 
+* added `fix_version_dependant` field to `xray_security_policy` resource. The field introduced in Xray 3.44.1
 [GH-39](https://github.com/jfrog/terraform-provider-xray/pull/39)
 
 ## 1.0.0 (Mar 16, 2022)
 
 IMPROVEMENTS:
 
-* added new resource `xray_settings` which will set Xray DB Sync Time. 
+* added new resource `xray_settings` which will set Xray DB Sync Time.
 [GH-35](https://github.com/jfrog/terraform-provider-xray/pull/35)
 
 
 ## 0.0.3 (Feb 22, 2022)
 
 BUG FIXES:
 
-* resource/xray_watch: Add all-builds to schema validation. 
+* resource/xray_watch: Add all-builds to schema validation.
 [GH-31](https://github.com/jfrog/terraform-provider-xray/pull/31)
 
 
@@ -58,4 +64,3 @@ Xray provider was separated from Artifactory provider. The most notable differen
 - Security policy and License policy now are separate Terraform provider resources.
 - In Schemas, TypeList was replaced by TypeSet (where it makes sense) to avoid sorting problems, when Terraform detect the change in sorted elements.
 - Added multiple validations for Schemas to verify the data on the Terraform level instead of getting errors in the API response.
-

go.mod

@@ -55,7 +55,7 @@ require (
 	google.golang.org/protobuf v1.28.0 // indirect
 	gopkg.in/asn1-ber.v1 v1.0.0-20181015200546-f715ec2f112d // indirect
 	gopkg.in/ldap.v2 v2.5.1 // indirect
-	gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b // indirect
+	gopkg.in/yaml.v3 v3.0.0 // indirect
 )
 
 go 1.18

go.sum

@@ -348,7 +348,7 @@ gopkg.in/yaml.v2 v2.2.3/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.4/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.3.0/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b h1:h8qDotaEPuJATrMmW04NCwg7v22aHH28wwpauUhK9Oo=
-gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gopkg.in/yaml.v3 v3.0.0 h1:hjy8E9ON/egN1tAYqKb61G10WtihqetD4sz2H+8nIeA=
+gopkg.in/yaml.v3 v3.0.0/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
 honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=