Fix: Upgrade gopkg.in/yaml.v2 to gopkg.in/yaml.v3 due to security issue

[rafaeljusto]

From the security report:

An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash
when attempting to deserialize invalid input.

While upgrading to version 3, there were some required changes:

• Force the encoder to use 2 spaces for indentation
• Rewrite tests so lists are indented

References:
https://nvd.nist.gov/vuln/detail/CVE-2022-28948
go-yaml/yaml#666
GHSA-hp87-p4gw-j4gq

[codecov]

Codecov Report

Merging #91 (8d531be) into master (d062f3c) will increase coverage by 0.06%.
The diff coverage is 100.00%.

@@            Coverage Diff             @@
##           master      #91      +/-   ##
==========================================
+ Coverage   74.11%   74.18%   +0.06%     
==========================================
  Files          10       10              
  Lines        1495     1499       +4     
==========================================
+ Hits         1108     1112       +4     
  Misses        279      279              
  Partials      108      108              

Impacted Files	Coverage Δ
docparse/jsonschema.go	70.44% <ø> (ø)
html/html.go	29.72% <ø> (ø)
openapi2/openapi2.go	82.69% <100.00%> (+0.27%)	⬆️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update d062f3c...8d531be. Read the comment docs.

[ripexz]

Am I misreading the linked issues/reports or was the vulnerability only present in v3 and not v2 (which we're currently using)? Granted it's now fixed in v3 as well, but arguably this wasn't necessary unless we intend to use some v3 features 🤔

[rafaeljusto]

Yep, you read it right 😄 , the biggest pain is that the Github Alert (for some strange reason) decided to annoy about anything before version 3.0.0:

So to get rid of the repository warning, we actually need to upgrade to version 3:

[ripexz]

They just released 3.0.1, might as well go for that then 😅

[rafaeljusto]

Thanks @ripexz ! Upgraded there now 🙂