Update dependency yaml to v2.2.2 [SECURITY] (main)

[renovatebot-confluentinc]

For any questions/concerns about this PR, please review the Renovate Bot wiki/FAQs, or the #renovatebot Slack channel.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
yaml (source)	2.1.0 -> 2.2.2

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Uncaught Exception in yaml

CVE-2023-2251 / GHSA-f9xv-q969-pqx4

More information

Details

Uncaught Exception in GitHub repository eemeli/yaml starting at version 2.0.0-5 and prior to 2.2.2.

Severity

• CVSS Score: 7.5 / 10 (High)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-2251
• https://github.com/eemeli/yaml/commit/984f5781ffd807e58cad3b5c8da1f940dab75fba
• https://github.com/eemeli/yaml
• https://huntr.dev/bounties/4b494e99-5a3e-40d9-8678-277f3060e96c

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.