fix: replace remaining safeLoad with load (#773)

This commit replaces the remaining `safeLoad` function calls with
the new `load` and updates the patch version of the transitive `js-yaml`
dependency in the `package-lock.json` to fix a recent CVE.

Signed-off-by: Norbert Biczo <[email protected]>

Author: pyrooka

package-lock.json

@@ -11,7 +11,7 @@ async function readYaml(path) {
   // Use a "promisified" version of fs.readFile().
   const readFile = util.promisify(fs.readFile);
   const fileContents = await readFile(path, 'utf8');
-  return jsYaml.safeLoad(fileContents);
+  return jsYaml.load(fileContents);
 }
 
 module.exports = readYaml;

packages/validator/src/cli-validator/utils/read-yaml.js

@@ -14,7 +14,7 @@ describe('scoring-tool compute-metrics tests', function () {
   beforeAll(async function () {
     const fileToTest = `${__dirname}/../cli-validator/mock-files/oas3/clean.yml`;
     const contents = await readFile(fileToTest, { encoding: 'utf8' });
-    const apiDef = readYaml.safeLoad(contents);
+    const apiDef = readYaml.load(contents);
     metrics = await computeMetrics(apiDef);
   });
 

packages/validator/test/scoring-tool/compute-metrics.test.js

@@ -14,7 +14,7 @@ describe('scoring-tool metrics tests', function () {
   beforeAll(async function () {
     const fileToTest = `${__dirname}/../cli-validator/mock-files/oas3/clean.yml`;
     const contents = await readFile(fileToTest, { encoding: 'utf8' });
-    apiDef = readYaml.safeLoad(contents);
+    apiDef = readYaml.load(contents);
   });
 
   it('should initialize members in constructor', function () {