Merge pull request #72 from contentful/dependabot/pip/pyyaml-5.4

Bump pyyaml from 5.3.1 to 5.4
contentful · Apr 1, 2024 · d2ae4c7 · d2ae4c7
2 parents 86808ad + 776ec62
commit d2ae4c7
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,6 +2,9 @@
 
 ## Unreleased
 
+### Changed
+* Updated `pyyaml` version to fix a vulnerability.
+
 ## v2.14.0
 * Adds support for cross-space references
 

diff --git a/requirements.txt b/requirements.txt
@@ -17,7 +17,7 @@ pyflakes==2.2.0
 Pygments==2.7.3
 python-dateutil==2.8.2
 pytz==2020.5
-PyYAML==5.3.1
+PyYAML==6.0.1
 requests==2.25.1
 six==1.15.0
 snowballstemmer==2.0.0