Deprecate gopkg.in/yaml.v3 in favor of go.yaml.in/yaml/v3

[hyp3rd]

The package gopkg.in/yaml.v3 was archived by its owner on April 1, 2025, and is now in read-only mode. This library poses a risk if it requires dependencies to be pinned to unmaintained versions.

[MB175]

I am facing the same issue atm, I would also suggest replacing the yaml dep with the active one

[hyp3rd]

I have a PR pending, but it's not being reviewed

[MB175]

Gnostic models is already using the new dependency, this is causing issues using the packages
https://github.com/google/gnostic-models/blob/82b4ba06c153dcd30e1dbcf93601b3bee5cb3792/go.mod#L6

[hyp3rd]

Indeed. It is causing compatibility issues across packages, but the PR seems to be ageing like many others.

[stivens13]

Can confirm this is an issue and breaks downstream consumers that use both gnostic and gnostic-models` at v0.7.0 because of yaml packages mismatch

[cyberxnomad]

This project currently has no maintainers. 😟

[Jefftree]

Merged #454 and released v0.7.1.

Going to mark this as resolved.