Switch from snakeyaml to snakeyaml engine

[trask]

We switched from snakeyaml to snakeyaml-engine in #5138.

One of the motivations for this was because of https://nvd.nist.gov/vuln/detail/CVE-2022-1471.

Since then, snakeyaml agreed to release 2.0 to address/quiet scanners: https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64876314 (which is great).

Still probably a good idea to consolidate on snakeyaml-engine.

Btw, this doesn't remove snakeyaml from the classpath, since jackson-dataformat-yaml still uses snakeyaml. They have updated to snakeyaml-engine in master, but won't be released until 3.0 (https://github.com/FasterXML/jackson-dataformats-text/tree/master/yaml).

[codecov]

Codecov Report

Patch and project coverage have no change.

Comparison is base (d4a3b3b) 91.34% compared to head (d088120) 91.34%.

Additional details and impacted files

@@            Coverage Diff            @@
##               main    #5691   +/-   ##
=========================================
  Coverage     91.34%   91.34%           
  Complexity     4997     4997           
=========================================
  Files           554      554           
  Lines         14793    14793           
  Branches       1379     1379           
=========================================
  Hits          13513    13513           
  Misses          883      883           
  Partials        397      397           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[jack-berg]

Oops thanks!