diff --git a/bin/yaml_edit.py b/bin/yaml_edit.py index fe4c32b7..590c6e92 100755 --- a/bin/yaml_edit.py +++ b/bin/yaml_edit.py @@ -88,7 +88,7 @@ def process_file(editor, filepath): yaml = YAML() yaml.preserve_quotes = True with open(filepath) as fobj: - data = yaml.load(fobj) + data = yaml.safe_load(fobj) try: data = editor.edit(data) except KeyError: diff --git a/pyproject.toml b/pyproject.toml index 43fc497c..a7b032c9 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -23,7 +23,7 @@ requires-python = ">= 3.12" dependencies = [ "ConfigArgParse == 0.14.0", "prometheus_client == 0.7.1", - "PyYAML == 5.1.2", + "PyYAML == 6.0.2", "pyaml == 19.4.1", "pinject == 0.14.1", "decorator < 5.0.0", # 5.0.0 and later drops py2 support (transitive dep from pinject)