Update dependency PyYAML to v5.4 (main) - autoclosed

[mend-for-github-com]

This PR contains the following updates:

Package	Update	Change
PyYAML (source)	minor	==5.1.2 -> ==5.4

By merging this PR, the below issues will be automatically resolved and closed:

Severity	CVSS Score	CVE	GitHub Issue
High	9.8	CVE-2020-1747	#269
High	9.8	CVE-2019-20477	#270
High	9.8	CVE-2020-14343	#271

---

Release Notes

yaml/pyyaml

v5.4

Compare Source

v5.3.1

Compare Source

v5.3

Compare Source

v5.2

Compare Source

• Repair incompatibilities introduced with 5.1. The default Loader was changed,
  but several methods like add_constructor still used the old defahttps://github.com/yaml/pyyaml/pull/279pull/279 -- A more flexible fix for custom tag consthttps://github.com/yaml/pyyaml/pull/287aml/pull/287 -- Change default loader for yaml.add_https://github.com/yaml/pyyaml/pull/305/pyyaml/pull/305 -- Change default loader for add_implicit_resolver, add_path_resolver
• Make FullLoader safer by removing python/object/apply from the default FullLoader
  https://github.com/yaml/pyyaml/pull/347/347 -- Move constructor for object/apply to UnsafeConstructor
• Fix bug introduced in 5.1 where quoting went wrong on systems with sys.maxunicode <= 0xffff
  https://github.com/yaml/pyyaml/pull/276/276 -- Fix logic for quoting special characters
• Other PRs:
  https://github.com/yaml/pyyaml/pull/280/280 -- Update CHANGES for 5.1

---

• If you want to rebase/retry this PR, check this box.

[cortx-admin]

Can one of the admins verify this patch?

[ajaysrivas]

@indrajitzagade This needs to be discussed in integration meeting, impacts packaging of 3rd party modules and will require RE team's help.

[indrajitzagade]

@indrajitzagade This needs to be discussed in integration meeting, impacts packaging of 3rd party modules and will require RE team's help.

Sure @ajaysrivas

[stale]

This issue/pull request has been marked as needs attention as it has been left pending without new activity for 4 days. Tagging @indrajitzagade @ajaysrivas for appropriate assignment. Sorry for the delay & Thank you for contributing to CORTX. We will get back to you as soon as possible.

[mend-for-github-com]

Autoclosing Skipped

This PR has been flagged for autoclosing, however it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.