Replace yaml-rust with yaml-rust2 in order to not be affected by RUSTSEC-2024-0320

[d3rpp]

yaml-rust appears to be unmaintained, however, the community has published an actively maintained fork under the name of yaml-rust2, It is a drop in replacement.

Details on "Vulnerability" - RUSTSEC-2024-0320.

Assuming this isn't a duplicate (I could not find this being brought up before in this issues list), I will submit a PR dropping this in, it's a single line so assuming the developers of yaml-rust2 didn't change the API, shouldn't be an issue.

[d3rpp]

Update: it appears, yaml-rust isn't being used in the crate at all?

I'll submit a PR to run the update regardless, though it may be worth looking into removing it all together since the dependency doesn't seem to be referenced in the code at all.

[CosmicHorrorDev]

Update: it appears, yaml-rust isn't being used in the crate at all?

It's used throughout this file

syntect/src/parsing/yaml_load.rs

Lines 8 to 9 in de715e5

	use yaml_rust::yaml::Hash;
	use yaml_rust::{ScanError, Yaml, YamlLoader};

[d3rpp]

Update: it appears, yaml-rust isn't being used in the crate at all?

It's used throughout this file

syntect/src/parsing/yaml_load.rs

Lines 8 to 9 in de715e5

	use yaml_rust::yaml::Hash;
	use yaml_rust::{ScanError, Yaml, YamlLoader};

Ah, my apologies